Take it like a gift

Use a Fake image.jpg to exploit targets (hide known file extensions).

A runtime mobile application analysis toolkit with a Web GUI.

Gives root access on remote docker containers that expose their APIs.

LDAP library for auditing Microsoft Active Directory.

Fast CLI DNS lookup tool.

All in one tool for information gathering, vulnerability scanning and crawling.

Smart SSRF scanner using different methods like parameter brute forcing in POST and GET.

A simple SSRF-testing sheriff written in Go.

Dangerously fast DNS/network/port scanner.

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic.

IIS shortname scanner written in Go.

qsfuzz is a tool that allows to write simple rules in YAML that define what value to inject

A comprehensive scanner for Google Cloud.

DS_Store file parser/viewer.

Burp Suite plugin that extracts keywords from response using and test for reflected XSS.