Tools & Downloads.
Hand-picked utilities our instructors actually use on engagements — Burp extensions, recon scripts, AD helpers, lab ISOs and exploit primers. All free, all reviewed.
Free downloads from our trainers.
tb-jwt-attacker
Burp Suite extension for automated JWT vulnerability testing — none, alg confusion, key injection.
ad-audit.ps1
PowerShell script for Active Directory security baseline assessment and misconfiguration detection.
cloud-enum
Multi-cloud resource enumeration tool for AWS, Azure, and GCP — buckets, blobs, and instances.
threat-model-template
Editable threat modelling template with STRIDE methodology and data-flow diagram starters.
incident-response-playbook
Step-by-step IR playbook covering containment, eradication, recovery, and lessons learned.
cheatsheet-pack
Nmap, Burp, SQLMap, Metasploit, and privilege escalation cheat sheets in PDF format.
Need a tool we don't list?
Email us — if it's something our students need, we probably already have it lying around.