Take it like a gift

CloudMapper
CloudMapper

CloudMapper helps you analyze your Amazon Web Services environments.

Osmedeus
Osmedeus

A Workflow Engine for Offensive Security

SSRFPwned
SSRFPwned

Checks for SSRF using custom payloads after fetching URLs from sources & applying complex patterns.

s3cXSSer
s3cXSSer

This extension will help you to detect GET/POST based XSS vulnerability in any website easily.

Mimicry
Mimicry

A dynamic deception tool that actively deceives an attacker.

lynis
lynis

Security auditing tool for Linux, macOS, and UNIX-based systems.

NetExec
NetExec

Network service exploitation tool that helps automate assessing the security of large networks.

Scopein
Scopein

A Go tool for scope management.

WinPmem
WinPmem

The Windows memory acquisition tool.

SubOver
SubOver

A Powerful Subdomain Takeover Tool.

slither
slither

Static analyzer for Solidity.

pyBuster
pyBuster

A multi-target URL bruteforcer.

securityonion
securityonion

Free and open platform for threat hunting, enterprise security monitoring, and log management.

mimikatz
mimikatz

A little tool to play with Windows security.

LocalPotato
LocalPotato

Another local Windows privilege escalation using a new potato technique.