Take it like a gift

DNSCewl
DNSCewl

A DNS bruteforcing wordlist generator.

Distribute Damage
Distribute Damage

Evenly distributes scanner load across targets.

fuzzuli
fuzzuli

Find critical backup files by creating a dynamic wordlist based on the domain.

Requests-Racer
Requests-Racer

Exploit race conditions in web apps with Requests.

Commix
Commix

Automated All-in-One OS Command Injection Exploitation Tool.

hakrawler
hakrawler

Simple, fast web crawler designed for discovery of endpoints and assets within a web application.

Damn Vulnerable RESTaurant
Damn Vulnerable RESTaurant

An intentionally vulnerable web API game for learning and training purposes.

Core Impact
Core Impact

Designed to enable security teams to conduct advanced penetration tests with ease.

differer
differer

differer finds how URLs are parsed by different languages in order to help bug hunters break filters.

Default Credentials Cheat Sheet
Default Credentials Cheat Sheet

One place for all the default credentials to assist on finding devices with default password.

CypherDog
CypherDog

PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API.

dnscan
dnscan

Python wordlist-based DNS subdomain scanner.

gcp_scanner
gcp_scanner

A comprehensive scanner for Google Cloud.

Cuckoo Sandbox
Cuckoo Sandbox

An automated dynamic malware analysis system.

drozer
drozer

The leading security assessment framework for Android.