Take it like a gift

PowerShell MachineAccountQuota and DNS exploit tools.

DOM XSS scanner for Single Page Applications.

Scripting engine to interact with a graphql endpoint for pentesting purposes.

Domain name permutation engine written in Go.

Search exposed EBS volumes for secrets.

Better understand the structure, construction, and security of open source software packages.

A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

Self contained web shells and other attacks via .htaccess files.

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.

A simple CLI tool for making tunnels to localhost.

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

Java application for automatic SQL database injection.

API key/token exploitation made easy.

A tool used to check if a CNAME resolves to the scope address.

Chrome extension that finds DOM based XSS vulnerabilities.