A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Knock Subdomain Scan

A python script that finds endpoints in JavaScript files

Tool for Active Directory Certificate Services enumeration and abuse

A Python based ingestor for BloodHound

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

Passive hostname, domain and IP lookup tool for non-robots

A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.

A Python based ingestor for BloodHound

Tool to parse subdomains from dmarc.live

Downlaod all the nuclei Templates created from many Bug Hunters

Some useful test data or payloads