One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

A tool for IDN homograph attacks and detection.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

HTTP parameter discovery suite.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Platform to audit trackers used by Android application

Striker is an offensive information and vulnerability scanner.