Take it like a gift

qsfuzz is a tool that allows to write simple rules in YAML that define what value to inject

The web-application vulnerability scanner.

Allows you to intercept and edit HTTP/HTTPS requests and responses.

Script to steal passwords from ssh.

A fast tool to check subdomain takeover vulnerability.

Locate and attack Lync and Skype for Business.

A password spraying tool for Microsoft Online accounts (Azure/O365).

Sharing knowledge that makes your life as bug hunters and pentesters easier.

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.

Consulting different intelligence services, search engines and datasets for OSINT.

Post-exploitation tools to gather credentials from various password managers and Windows utilities.

Simple script to extract all web resources by means of .SVN folder exposed over network.

Automatic SQL injection with Charles and sqlmap API.

A simple SSRF-testing sheriff written in Go.

Fetches javascript file from a list of URLS or subdomains.