Take it like a gift

Chaos
sponsor
Chaos

Collect and maintain internet-wide assets data for public Bug Bounty programs.

CLZero
CLZero

A project for fuzzing HTTP/1.1 CL.0 Request Smuggling attack vectors.

XXElixir
XXElixir

This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.

IntruderPayloads
IntruderPayloads

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

CloudGoat
CloudGoat

Vulnerable by design AWS deployment tool.

CloakQuest3r
CloakQuest3r

Uncover the true IP address of websites safeguarded by Cloudflare & others.

cve-collector
cve-collector

Simple latest CVE collector written in Python.

CloudBrute
CloudBrute

Awesome cloud enumerator.

checkov
checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time.

CORS Scanner
CORS Scanner

A multi-threaded scanner that helps identify CORS flaws/misconfigurations.

ctftool
ctftool

Interactive CTF exploration tool.

cheat.sh
cheat.sh

The only cheat sheet you need.

CMSmap
CMSmap

CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

chipsec
chipsec

Platform security assessment framework.

CloudFail
CloudFail

Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.