Take it like a gift

Continuous recon and pipeline tools setup.

A dynamic deception tool that actively deceives an attacker.

Yet another (simple and lightweight) C2 framework.

Find AWS S3 buckets and test their permissions.

Netcat on steroids with many extra features.

A Go tool for scope management.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.

Search Google and download specific file types.

Convert your masscan/subdomain-scan results into screenshots for better analysis.

A nonprofit foundation that works to improve the security of software.

Look for several security related Android application vulnerabilities.

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

Lightweight static analysis for many languages.

String-based secret-searching tool, high entropy and regexes.

SecretFinder is a script based on LinkFinder, written to find sensitive data in JavaScript files.