Take it like a gift

DVCA
DVCA

Damn vulnerable cloud application.

SSRFire
SSRFire

An automated SSRF finder. Just give the domain name and your server and chill!

dnscat2
dnscat2

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

CloudFlair
CloudFlair

Find origin servers of websites behind Cloudflare by using Internet-wide scan data from Censys.

clair
clair

Vulnerability static analysis for containers.

crtndtry
crtndtry

Yet another subdomain finder.

Chimera
Chimera

Obfuscation script designed to bypass AMSI and commercial antivirus solution.

nuclei-wordfence-cve
nuclei-wordfence-cve

Collection of Nuclei templates dedicated to WordPress core, plugins and themes vulnerabilities.

Photon
Photon

Incredibly fast crawler designed for OSINT.

repo-supervisor
repo-supervisor

Scan your code for security misconfiguration, search for passwords and secrets.

CORStest
CORStest

A simple CORS misconfiguration scanner.

DivideAndScan
DivideAndScan

Divide full port scan results and use it for targeted Nmap runs.

csp-analyzer
csp-analyzer

Analyze Content-Security-Policy header of a given URL.

reGeorg
reGeorg

Pwn a bastion webserver and create SOCKS proxies through the DMZ.

Cr3dOv3r
Cr3dOv3r

Know the dangers of credential reuse attacks.