Take it like a gift

sponsor

Fast and configurable TLS grabber focused on TLS based data collection.

A Git source leak exploit tool that restores the entire Git repository, including data from stash.

A Windows potato to privesc.

Enumerating and attacking Java Remote Method Invocation services.

A Fuzzer for OpenRedirect issues.

Identify technologies and services used by domains through their DNS footprints.

Endpoint visibility and collection tool.

A Linux privilege escalation check script.

Assessment tool that allows penetration testing and hostile attack simulations.

A cross-version Python bytecode decompiler.

A CLI application that automatically prepares Android APK files for HTTPS inspection.

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

Wordlists handcrafted and automated with <3

Bug Bounty Reports Explained channel.

API key/token exploitation made easy.