Take it like a gift

A simple script to screenshot a list of websites.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files.

Fast web fuzzer written in Go.

Data exfiltration over DNS request covert channel.

Tool to remotely dump secrets from the Windows registry.

The Directory Traversal Fuzzer.

CSRF Scanner Extension for Burp Suite Pro.

Go365 performs user enumeration and password guessing attacks on organizations that use Office365.

Try to find the origin IP of a webapp protected by Cloudflare.

Series of tools for attacking MS Kerberos implementations.

Image metadata library and tools.

File upload vulnerability scanner and exploitation tool.

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

Tool to find metadata and hidden information in the documents.

Subdomain takeover tool for attackers, bug bounty hunters and the blue team!