Take it like a gift

HTTP Request Smuggling Detection Tool.

The global gold standard in vulnerability assessment built for the modern attack surface.

Helps to identify IoT related dashboards and scan them for default passwords.

A fast and minimal JS endpoint extractor.

Creates a spoofed certificate of any online website and signs an executable for AV evasion.

Enumerating and attacking Java Remote Method Invocation services.

A tool to monitor for potential spear phishing domains and send to Slack.

Obfuscation script designed to bypass AMSI and commercial antivirus solution.

Active Directory Certificate Services enumeration and abuse.

A Windows potato to privesc.

Spoof SSDP replies to phish for credentials and NetNTLM challenge/response.

Leak git repositories from misconfigured websites.

All In One Web Recon.

Automates the process of detecting and exploiting SQL injection security flaws.

Wireless network auditing tool.