Take it like a gift

Tamper Data
Tamper Data

View and modify HTTP requests before they are sent.

hrekt
hrekt

A really fast HTTP prober.

cnames
cnames

Take a list of resolved subdomains and output any corresponding CNAMES en masse.

Certify
Certify

Active Directory certificate abuse.

CeWL
CeWL

Custom Word List Generator.

HackTricks
HackTricks

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

CloudFail
CloudFail

Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.

Linpmem
Linpmem

The Linux memory acquisition tool.

JNDI-Injection-Exploit
JNDI-Injection-Exploit

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

Certipy
Certipy

Active Directory Certificate Services enumeration and abuse.

headi
headi

Customisable and automated HTTP header injection.

litefuzz
litefuzz

A multi-platform fuzzer for poking at userland binaries and servers.

plution
plution

Prototype pollution scanner using headless chrome.

Recon-ng
Recon-ng

OSINT tool aimed at reducing the time spent harvesting information from open sources.

CertStealer
CertStealer

A .NET tool for exporting and importing certificates without touching disk.