Take it like a gift

windows-privesc-check
windows-privesc-check

Standalone executable to check for simple privilege escalation vectors.

kube-bench
kube-bench

Checks whether Kubernetes is deployed according to security best practices.

cve
cve

Gather and update all available and newest CVEs with their PoC.

creepyCrawler
creepyCrawler

Crawl a site and extract useful informations for recon.

axiom
axiom

Distribute the workload of many different scanning tools with ease.

graftcp
graftcp

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

EarlyBird
EarlyBird

Sensitive data detection tool capable of scanning source code repositories.

Cross-site scripting cheat sheet
Cross-site scripting cheat sheet

PortSwigger XSS cheat sheet that contains many vectors that can help you bypass WAFs and filters.

assetfinder
assetfinder

Find domains and subdomains related to a given domain.

deser-node
deser-node

NodeJS deserialization payload generator.

CrossC2
CrossC2

Generate CobaltStrike's cross-platform payload.

Ettercap
Ettercap

Free and open source network security tool for man-in-the-middle attacks on a LAN.

falco
falco

Cloud native runtime security.

evilgophish
evilgophish

Combination of evilginx3 and GoPhish.

Covenant
Covenant

Collaborative C2 framework for red teamers.