Take it like a gift

CRLF bug scanner for WebPentesters and Bugbounty Hunters.

Detect stegano-hidden data in PNG & BMP.

Default passwords database sorted by manufacturers.

Set as many exfiltration, techniques that CAN be used to bypass various.

Automation of tokens/api keys testing.

Tool to enumerate targets in search of cloud resources.

Powerful and interactive packet manipulation program and library.

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

Autonomously assesses your API for prevalent vulnerabilities.

Check for backup artifacts that may disclose the web-application's source code.

Web Application Security Scanner Framework.

CORS misconfiguration scanner tool with speed and precision in mind!

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.

A simple multi-threaded distributed SSH brute-forcing tool.

OSINT tool used for web crawling or examining JavaScript files for likely useful data.