Take it like a gift

xxeserv
xxeserv

A mini webserver with FTP support for XXE payloads.

Scumblr
Scumblr

Perform periodic syncs of data sources and performing analysis on the identified results.

PyExfil
PyExfil

Set as many exfiltration, techniques that CAN be used to bypass various.

RustHound
RustHound

Active Directory data collector for BloodHound written in Rust.

S3Scanner
S3Scanner

Scan for open S3 buckets and dump the contents.

NanoDump
NanoDump

A flexible tool that creates a minidump of the LSASS process.

PortSwigger WebSecurity Academy
PortSwigger WebSecurity Academy

Free, online web security training from the creators of Burp Suite.

SocialPwned
SocialPwned

Allows to get the emails from a target published in social networks to find possible credentials.

talisman
talisman

Validate the outgoing changeset for things that look suspicious such as tokens, passwords and keys.

skipfish
skipfish

Active web application security reconnaissance tool.

qsreplace
qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value.

phpsploit
phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.

pingcastle
pingcastle

Get Active Directory security at 80% in 20% of the time.

SQLRecon
SQLRecon

A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation.

RedELK
RedELK

Tool for Red Teams used for tracking and alarming about Blue Team activities.