Dumps secrets remotely using a variety of techniques including DCSync (without running code on DC), …

Detects the use of JavaScript libraries with known vulnerabilities. Available as a CLI tool, browser…

Lightweight program to find all known misconfigurations in CORS (Cross-Origin Resource Sharing) impl…

Tool for visual inspection of websites across large numbers of hosts. Takes screenshots of web pages…

Automated NoSQL injection and database exploitation tool. Targets MongoDB, CouchDB, Redis, and Cassa…

Takes screenshots of web pages, RDP, and VNC services. Reports on default credentials and interestin…