Take it like a gift

A Web-UI for subdomain enumeration.

Tool to remotely dump secrets from the Windows registry.

Generates gopher link for exploiting SSRF and gaining RCE in various servers.

Modular cross-platform Microsoft Graph API enumeration and exploitation toolkit.

Grab NetNTLMv2 hashes using ETW with administrative rights on Windows.

Probe a rendering engine for vulnerabilities and other features.

A free class for web security.

Exfiltrate files from a target's Google Drive that you have access to, via Google's API.

Gather all companies acquired by a given company domain name.

Reconnaissance tool for GitHub organizations.

Threat framework to research security gaps in GraphQL implementations.

HackerSploit YouTube channel.

Extract data from a .git directory.

Game of Active Directory.

Capture and replay live HTTP traffic in order to continuously test your system with real data.