Take it like a gift

Sharing knowledge that makes your life as bug hunters and pentesters easier.

Connects to LDAP directory to retrieve all computers and users informations.

Get the TOTP secrets exported by Google Authenticator.

Massive hacking playground, and infosec community.

A golang, web screenshot utility using Chrome Headless.

Powerful and user-friendly password hunting tool.

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Extract domains/subdomains from URLs en masse.

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.

Finds Directory Listings or open S3 buckets from a list of URLs.

Beautifier for JavaScript.

Sub domain wild card filtering tool.

Lists the different ways of reaching a given type in a GraphQL schema.

A hub for finding CVEs and exploits based on the official NIST, ExploitDB and Github databases.