Take it like a gift

A tool for testing for certificate validation vulnerabilities of TLS connections.

A tool that shows detailed information about named pipes in Windows.

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

Automatically coerce a Windows server to authenticate on an arbitrary machine.

Active Directory assessment and privilege escalation script.

Tool to enumerate targets in search of cloud resources.

Static analysis framework built in house to do security vetting for Android applications.

Leverage ASN to look up IP addresses owned by a specific organization.

In-depth Attack Surface Mapping and Asset Discovery.

A Burp Suite extension for finding the use of potentially dangerous methods/functions.

A Burp Suite extension made to automate the process of bypassing 403 pages.

Check for backup artifacts that may disclose the web-application's source code.

Burp Suite extension that allows request/response modification using a GUI.

A list of services and how to claim (sub)domains with dangling DNS records.

HTTP parameter discovery suite.