Take it like a gift

Automated adversary emulation platform.

Monitors Github for leaked secrets.

CORS misconfiguration scanner tool with speed and precision in mind!

Create vulnerable instrumented local or cloud environments to simulate attacks.

Small and highly portable detection tests based on MITRE's ATT&CK.

Designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential.

A light-weight first-stage C2 implant written in Nim.

Lateral movement graph for Azure Active Directory.

AV/EDR evasion via direct system calls.

Leverage ASN to look up IP addresses owned by a specific organization.

Fetches javascript file from a list of URLS or subdomains.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

A Powerful Subdomain Takeover Tool.

An automated SSRF finder. Just give the domain name and your server and chill!

Manage Burp Suite certificate in Android to redirect all traffic to Burp Suite.