Take it like a gift

snallygaster
snallygaster

Tool to scan for secret files on HTTP servers.

off-by-slash
off-by-slash

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

Ophcrack
Ophcrack

Windows password cracker based on rainbow tables.

MassDNS
MassDNS

A high-performance DNS stub resolver for bulk lookups and reconnaissance.

postleaks
postleaks

Search for sensitive data in Postman public library.

Legion
Legion

Aids in discovery, reconnaissance and exploitation of information systems.

Recon-ng
Recon-ng

OSINT tool aimed at reducing the time spent harvesting information from open sources.

mvt
mvt

Helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Aranea
Aranea

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

httprobe
httprobe

Take a list of domains and probe for working HTTP and HTTPS servers.

repo-supervisor
repo-supervisor

Scan your code for security misconfiguration, search for passwords and secrets.

dnsgen
dnsgen

Generates combination of domain names from the provided input.

Security Monkey
Security Monkey

Monitor AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

ruler
ruler

A tool to abuse Exchange services.

reconFTW
reconFTW

Runs the best set of tools to perform scanning and finding out vulnerabilities on a target domain.