Take it like a gift

vaf
vaf

Cross-platform very advanced and fast web fuzzer written in nim.

Gobuster
Gobuster

Directory/File, DNS and VHost busting tool written in Go.

Faraday security
Faraday security

Open source sulnerability management and orchestration platform.

APKiD
APKiD

Android application identifier for packers, protectors, obfuscators and oddities.

hakfindinternaldomains
hakfindinternaldomains

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Certify
Certify

Active Directory certificate abuse.

BitBlinder
BitBlinder

Injects custom XSS payloads on every form/request submitted to detect blind XSS.

archaeologit
archaeologit

Scans the history of GitHub repositories to find sensitive things.

Invoke-BSOD
Invoke-BSOD

For when you want a computer to be done - without admin!.

favirecon
favirecon

Use favicon.ico to improve your target recon phase.

avet
avet

AntiVirus Evasion Tool.

kerberoast
kerberoast

Series of tools for attacking MS Kerberos implementations.

falco
falco

Cloud native runtime security.

airgeddon
airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

AllAboutBugBounty
AllAboutBugBounty

Bug Bounty notes gathered from various sources.