Take it like a gift

Offers crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute.

Take screenshots of websites, provide server header info and identify default credentials.

Burp Suite extension for dynamic payload generation to detect injection flaws.

Active Directory certificate abuse.

A Burp Suite extension to find potential endpoints and parameters.

Helps to bypass antiviruses by providing an encryption wrapper and loader for your shellcode.

Data exfiltration utility for testing detection capabilities.

Rip web accessible version control systems: svn, git...

Prevent cloud misconfigurations and find vulnerabilities during build-time.

Bug Bounty notes gathered from various sources.

A DNS reconnaissance tool for locating non-contiguous IP space.

Quickly find uncommon shares in vast Windows domains.

Identifies server-side prototype pollution vulnerabilities.