Detect public repository dependencies in the GitHub repositories with an orphan required library.

Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.

📱 objection - runtime mobile exploration

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Mallet is an intercepting proxy for arbitrary protocols

Solving CAPTCHA with Image Classification

Scan websites CSP policies and visualise their vunlnerabilities from a dashboard

InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.

Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.