Take it like a gift

List DTDs and generate XXE payloads using those local DTDs.

RSA multi-attacks tool: uncypher data from a weak public key and try to recover a private key.

Burp Suite extension for dynamic payload generation to detect injection flaws.

Automates decryptions & decodings with encodings, classical ciphers, hashes, or more.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.

Search exposed EBS volumes for secrets.

Prototype pollution scanner using headless chrome.

Combines the speed of masscan with the reliability and detailed enumeration of nmap.

Find out what websites are Built With.

Infect an existing Android application with a Meterpreter payload.

A list of strings which have a high probability of causing issues when used as user-input data.

Free web-application vulnerability and version scanner.

Automates the discovery and pwnage of ACLs in Active Directory that are unsafe configure.

Improved version of SayCheese, designed to capture images via social engineering.