Take it like a gift

Spoofy
Spoofy

Checks if a list of domains can be spoofed based on SPF and DMARC records.

AdvancedKeyHacks
AdvancedKeyHacks

API key/token exploitation made easy.

GitHunter
GitHunter

A tool for searching a Git repository for interesting content.

JSONBee
JSONBee

A ready to use JSONP endpoints/payloads to help bypass Content Security Policy.

jwt-cracker
jwt-cracker

Simple JWT token brute force cracker.

GPT_Vuln-Analyzer
GPT_Vuln-Analyzer

A powerful network scanner, DNS recon, subdomain enumeration and IP Geolocator tool powered by GPT.

espionage
espionage

Collects informations related to domains whois, history, dns records and more.

GoLinkFinder
GoLinkFinder

A fast and minimal JS endpoint extractor.

JS-Scan
JS-Scan

A .js scanner, built in PHP, designed to scrape urls and other info.

Bypass-403
Bypass-403

A simple script just made for self use for bypassing 403.

Gopherus
Gopherus

Generates gopher link for exploiting SSRF and gaining RCE in various servers.

HardeningKitty
HardeningKitty

Checks and hardens your Windows configuration.

kiterunner
kiterunner

Contextual content discovery tool.

BugProve
BugProve

Automated firmware analysis tool for composition analysis and vulnerability scanning.

Arachni
Arachni

Web Application Security Scanner Framework.