Automates the process of detecting and exploiting SQL injection security flaws.
Checks whether a domain is hosted on a cloud service.
Modern tool for Windows kernel exploration and tracing with a focus on security.
Damn vulnerable cloud application.
Automatically attempts default creds on found services based on Nmap output.
Enumerate an Active Directory environment with LDAP queries.
Custom Word List Generator.
Making favicon.ico based recon great again.
Advanced discovery of Privileged Accounts, includes Shadow Admins.
Highly configurable script for dictionary/spray attacks against online web applications.
Fluxion is the future of MITM WPA attacks.
Automated adversary emulation platform.
Exfiltrate files from a target's Google Drive that you have access to, via Google's API.
Search the entire internet by data in TLS certificates.
A complete TUI for LDAP.
