Take it like a gift

hcxdumptool
hcxdumptool

Small tool to capture packets from wlan devices.

Tracy
Tracy

Assists with finding all sinks and sources of a webapp and display the results in a nice way.

2tearsinabucket
2tearsinabucket

Enumerate s3 buckets for a specific target.

dBmonster
dBmonster

A multitool for tracking and locating nearby devices via their RF activities.

CRLFsuite
CRLFsuite

The most powerful CRLF injection scanner.

FlowMate
FlowMate

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

FavFreak
FavFreak

Making favicon.ico based recon great again.

DVCA
DVCA

Damn vulnerable cloud application.

AWSGoat
AWSGoat

A damn vulnerable AWS infrastructure.

JSgen
JSgen

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

airbash
airbash

Fully automated WPA PSK PMKID and handshake capture script.

Acra
Acra

Database protection suite with field level encryption and intrusion detection.

Freddy Deserialization Bug Finder
Freddy Deserialization Bug Finder

A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.

GHunt
GHunt

Offensive Google framework.

fuxploider
fuxploider

File upload vulnerability scanner and exploitation tool.