Take it like a gift

Combination of evilginx3 and GoPhish.

Command execution exploiter with an auto connection handling.

Prevents you from committing secrets and credentials into git repositories.

Tool to enumerate targets in search of cloud resources.

Find sensitive information for a git repo.

Open-source phishing toolkit.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files.

Check CSP serves as a strong mitigation against cross-site scripting attacks.

Generate wordlists of passwords containing cities at a defined distance around the client city.

NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!.

A tool to hunt for credentials in GitHub wild AKA git*hunt.

Fully customizable Windows-based pentesting virtual machine distribution.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A powerful browser crawler for web vulnerability scanners

Crack hashes in seconds.