Take it like a gift

Directory/File, DNS and VHost busting tool written in Go.

Burp Suite Extension useful to verify OAUTHv2 and OpenID security.

Automate your application security orchestration and correlation (ASOC).

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

A damn vulnerable Azure infrastructure.

Security Tool to Look For Interesting Files in S3 Buckets.

The Swiss Army knife for WiFi, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Pull secrets from an AWS environment.

A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.

Hack with JavaScript.

A list of strings which have a high probability of causing issues when used as user-input data.

A security toolkit for Amazon S3.

Toolkit to detect and keep track on Blind XSS, XXE & SSRF.

A centralized dashboard for running and scheduling WordPress scans powered by WPScan utility.

Deserialization payload generator for a variety of .NET formatters.