Take it like a gift

Nessus
Nessus

The global gold standard in vulnerability assessment built for the modern attack surface.

MSSQLand
MSSQLand

Navigate and conquer Microsoft SQL Server servers and their linked instances.

NodeGoat
NodeGoat

Learn how OWASP Top 10 security risks apply to web applications developed using Node.js.

Mythic
Mythic

A collaborative, multi-platform, red teaming framework.

OFFAT
OFFAT

Autonomously assesses your API for prevalent vulnerabilities.

Nagios
Nagios

The industry standard in IT infrastructure monitoring.

NanoDump
NanoDump

A flexible tool that creates a minidump of the LSASS process.

RecurseBuster
RecurseBuster

Rapid content discovery tool for recursively querying webservers.

NetExec
NetExec

Network service exploitation tool that helps automate assessing the security of large networks.

open-sesame
open-sesame

Contains HackerOne disclosed reports and other bug bounty writeups.

S3Scanner
S3Scanner

Scan for open S3 buckets and dump the contents.

ScopeHunter
ScopeHunter

Command-line tool for finding in-scope targets for bug bounty programs.

LocalPotato
LocalPotato

Another local Windows privilege escalation using a new potato technique.

s3tk
s3tk

A security toolkit for Amazon S3.

Ophcrack
Ophcrack

Windows password cracker based on rainbow tables.