Take it like a gift

JS-Tap
JS-Tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.

CloudFlair
CloudFlair

Find origin servers of websites behind Cloudflare by using Internet-wide scan data from Censys.

BetterBackdoor
BetterBackdoor

A backdoor with a multitude of features.

OSX Password Dumper
OSX Password Dumper

Dump users's .plist on a Mac OS system and to convert them into a crackable hash.

dnsgen
dnsgen

Generates combination of domain names from the provided input.

DomLink
DomLink

Link a domain with registered organisation names and emails, to other domains.

cloudflare-origin-ip
cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

amap
amap

Identify applications even if they are running on a different port than normal.

additional-scanner-checks
additional-scanner-checks

Collection of scanner checks missing in Burp.

AWS Extender CLI
AWS Extender CLI

Command-line script to test cloud storage for common misconfiguration issues.

DumpsterDiver
DumpsterDiver

Tool to search secrets in various filetypes.

bountyplz
bountyplz

Automated security reporting from markdown templates.

CyberSec Quizzes
CyberSec Quizzes

Test your knowledge on cyber security and practice for industry recognised certifications.

ChopChop
ChopChop

Scan endpoints and identify exposition of sensitive services/files/folders.

catphish
catphish

Generate similar-looking domains for phishing attacks.