Take it like a gift

A web hacking toolkit.

Graphical tool for custom wordlist generation.

A suite of secret scanners built in Rust for performance.

Implement the multiple A record DNS rebinding attack.

All the XSS cheatsheet data to allow contributions from the community.

Search for sensitive data in Postman public library.

A PostMessage fuzzing extension for Chrome.

Modular and decentralised honeypot.

Learn how OWASP Top 10 security risks apply to web applications developed using Node.js.

Bypass Kerberoast detections with modified KDC options and encryption types.

HTTP fuzzer engine security oriented.

Turn a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming or PE.

This tool for brute discover GET and POST parameters.

No-nonsense tool that takes credentials and a list of hosts and crawls through those shares.

OSINT tool used to discover environments, directories, and subdomains of a particular domain.