Take it like a gift

A post exploitation framework designed to operate covertly on heavily monitored environments.

A tool for automated security scanning of web applications.

The fastest dork scanner written in Go.

A golang, web screenshot utility using Chrome Headless.

Network recon framework.

Collect useful information from urls, directories, and files.

Automated Security Testing For REST API's.

Arch Linux-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

DNS asynchronous brute force utility.

A Burp Suite extension that checks for the HTTPoxy vulnerability.

Checks whether Kubernetes is deployed according to security best practices.

Bugcrowd’s baseline priority ratings for common security vulnerabilities.

Just a quick inventory, reminder and launcher for pentest commands.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

This script enumerates the permissions of all the AWS principals of an account.