Take it like a gift

Archive of public exploits and corresponding vulnerable software.

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.

Powershell tool to automate Active Directory enumeration.

Kscan is an all-round scanner developed purely in Go, with functions such as port scanning, protocol.

Probe a rendering engine for vulnerabilities and other features.

Toolkit to detect and keep track on Blind XSS, XXE & SSRF.

Link a domain with registered organisation names and emails, to other domains.

Identify routers on the local LAN and paths to the Internet.

Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.

A toolkit for testing, tweaking and cracking JSON Web Tokens.

One place for all the default credentials to assist on finding devices with default password.

Black box fuzzer for web applications.

Lists of resources: cdn ranges, ips ranges, sni ip ranges...