Take it like a gift

depsdev
depsdev

CLI client for deps.dev API.

gcp_scanner
gcp_scanner

A comprehensive scanner for Google Cloud.

hakfindinternaldomains
hakfindinternaldomains

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Brute Hacking Framework
Brute Hacking Framework

A framework including all the tools that work on Windows.

certSniff
certSniff

A certificate transparency log keyword sniffer written in Python.

GitTools
GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available.

FlowMate
FlowMate

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

XSS Hunter
XSS Hunter

The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities.

WhatWeb
WhatWeb

Next generation web scanner.

FuzzDB
FuzzDB

Attack patterns and primitives for black-box application fault injection and resource discovery.

Burp-Encode-IP
Burp-Encode-IP

Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.

assetfinder
assetfinder

Find domains and subdomains related to a given domain.

Betterscan
Betterscan

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.

secbutler
secbutler

The perfect butler for pentesters, bug-bounty hunters and security researchers.

demovfuscator
demovfuscator

A work-in-progress deobfuscator for movfuscated binaries.