Take it like a gift

Collection of multiple types of lists used during security assessments, collected in one place.

Offensive information and vulnerability scanner.

Domain user enumeration tool.

Server-side request forgery detector.

Spray shadow credentials across an entire domain.

A free, open source, cross platform Intelligence gathering tool.

Windows persistence toolkit written in C#.

Active web application security reconnaissance tool.

GraphQL security testing tool.

Designed to assist with auditing of exposed Swagger/OpenAPI) definition files.

Automatically create cheat sheets from all relevant vectors on the system.

Find cloud assets that no one wants exposed.

Assists with finding all sinks and sources of a webapp and display the results in a nice way.

Static analyzer for Solidity.

A collection of wordlists for many different usages.