Take it like a gift

Grabs screenshots and HTML of large numbers of websites.

A vulnerable Android application with an interface to test your mobile hacking skills.

An extension that auto extracts URLs from the current webpage and JS files.

Automated blind-xss search for Burp Suite.

Python script implementing the favicon hash trick to find subdomains.

The ultimate WinRM shell for hacking/pentesting.

Stalk your friends on social media using image recognition and reverse image search.

Find multiple types of hardcoded secrets & types of infrastructure-as-code misconfigurations.

Enumerating and attacking Java Remote Method Invocation services.

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.

Perform subdomain enumeration using the certificate transparency logs from Censys.

Leak git repositories from misconfigured websites.

The only cheat sheet you need.

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Extract data from a .git directory.