Take it like a gift

Checks whether Kubernetes is deployed according to security best practices.

Find out what websites are Built With.

Auto Scanning to SSL Vulnerability.

Discover the origin host behind a reverse proxy, useful for bypassing cloud WAFs!.

Bug Bounty Reports Explained channel.

Broken Link Hijacking Burp Suite extension.

A simple CLI tool for making tunnels to localhost.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Android application identifier for packers, protectors, obfuscators and oddities.

Extract domains/subdomains from URLs en masse.

Enumerating and attacking Java Remote Method Invocation services.

Crack hashes in seconds.

Automation framework for running multiple open sourced subdomain bruteforcing tools in parallel.

The all-in-one browser extension for offensive security professionals.

PowerShell script to dump Windows credentials from the Credential Manager.