Take it like a gift

A compiled checklist of 300+ tips for protecting digital security and privacy.

String-based secret-searching tool, high entropy and regexes.

Post-exploitation tool for dumping and extracting LSASS memory discreetly.

Automatic Linux privilege escalation via exploitation of low-hanging fruit.

Unprivileged Linux process snooping.

VM that is built from the ground up with a large amount of security vulnerabilities.

Python tool to remotely extract credentials on a set of hosts.

Performs buckets checks from a given list of subdomains.

SBOM parser that performs cursory vulnerability assessment.

Enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP.

A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card wirelessly.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration.

Collection of multiple types of lists used during security assessments, collected in one place.

pwning IPv4 via IPv6.

Amazon S3 bucket finder and crawler.