Take it like a gift

Secrets scanner that understands code.

Crawls URL to get a better image of what is tied to a website.

A Workflow Engine for Offensive Security

Collection of Nuclei templates dedicated to WordPress core, plugins and themes vulnerabilities.

Run PowerShell with rundll32 in order to bypass software restrictions.

Information gathering framework for phone numbers.

Tests for race conditions in web applications.

A light-weight first-stage C2 implant written in Nim.

The revolutionary architecture that powers Qualys' IT, security, and compliance cloud apps.

Leverage crt.sh website to monitor domains of a target.

Cover your tracks during Linux exploitation by leaving zero traces on the exploited system.

Collection of multiple types of lists used during security assessments, collected in one place.

OSINT tool for finding profiles by username.

An open source tool focused on software supply chain security.

A Chrome Extension to track postMessage usage (url, domain and stack).