Take it like a gift

Validate the outgoing changeset for things that look suspicious such as tokens, passwords and keys.

Enumerate usernames on a domain where you have no creds by using SMB relay.

Rust-based high performance domain permutation generator.

Automated learning of regexes for DNS discovery.

The industry standard in IT infrastructure monitoring.

Easily test HTTP webhooks with this handy tool that displays requests instantly.

A smart DNS response-guided subdomain fuzzer.

Post exploitation tool to maintain some level of acces.

Active web application security reconnaissance tool.

Retrieve information via O365 and AzureAD with valid credentials.

Discover the origin host behind a reverse proxy, useful for bypassing cloud WAFs!.

Searches code from over a half million public repositories on GitHub.

Image metadata library and tools.

Find subdomains on GitHub.

A fast and minimal JS endpoint extractor.