Take it like a gift

TruffleHog
TruffleHog

Find credentials all over the place.

BackupKiller
BackupKiller

Generate wordlist based on the URLs to check for backup, installation, etc files.

shhgit
shhgit

Secrets detection for your GitHub, GitLab and Bitbucket repositories.

WebScarab
WebScarab

Framework for analysing applications that communicate using the HTTP and HTTPS protocols.

secret-bridge
secret-bridge

Monitors Github for leaked secrets.

SiteBroker
SiteBroker

Utility for information gathering and penetration testing automation.

Keyfinder
Keyfinder

Find and analyze private/public key files and Android APK files.

SecLists
SecLists

Collection of multiple types of lists used during security assessments, collected in one place.

favicon-hashtrick
favicon-hashtrick

Python script implementing the favicon hash trick to find subdomains.

Shazzer
Shazzer

Automatically create cheat sheets from all relevant vectors on the system.

Autowasp
Autowasp

A one-stop pentesting checklist and logger tool.

gau
gau

Fetch known URLs from several sources.

TLD Scanner
TLD Scanner

Scan all possible TLD's for a given domain name.

CRLFuzz
CRLFuzz

A fast tool to scan CRLF vulnerability written in Go.

dnsgen
dnsgen

Generates combination of domain names from the provided input.