FindGPPPasswords is a cross-platform tool to find and decrypt Group Policy Preferences passwords from SYSVOL using low-privileged domain accounts.

Discover sisakulint, a fast SAST tool for GitHub Actions. It validates YAML files against security guidelines, prevents malicious code, and supports autofix.

DetentionDodger helps find users with leaked credentials and assess their impact on your organization, bolstering your cybersecurity defense.

FingerprintX is a blazing-fast Go tool that outpaces Nmap in service detection and works perfectly with Naabu for bug bounty recon

Plaguards automates PowerShell deobfuscation, helping security teams quickly identify threats and false positives with comprehensive PDF reports.

BFScan is a powerful tool to extract URLs, paths, and secrets from JAR, WAR, and APK files, generating raw HTTP requests and OpenAPI specs for security analysis.

Kereva LLM Code Scanner is a static analysis tool for Python LLM code, detecting security risks, performance issues, and vulnerabilities like prompt injection.

Jxscout is a new tool for security researchers, analyzing JavaScript code for vulnerabilities. It works with proxies like Burp/Caido, offering beautification, source map discovery, and AST analysis.

dAWShund is a new tool suite to enumerate, evaluate, and visualize AWS IAM policies and resource access conditions, helping security teams manage and secure cloud permissions.

COMmander is a lightweight, practical tool that monitors deep-seated RPC and COM activities in Windows, designed to detect subtle, invisible threats that bypass traditional security.