Take it like a gift

svn-extractor
svn-extractor

Simple script to extract all web resources by means of .SVN folder exposed over network.

FavFreak
FavFreak

Making favicon.ico based recon great again.

KeePwn
KeePwn

A python script to help red teamers discover KeePass instances and extract secrets.

CertStealer
CertStealer

A .NET tool for exporting and importing certificates without touching disk.

Fluxion
Fluxion

Fluxion is the future of MITM WPA attacks.

DNSTake
DNSTake

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.

JSgen
JSgen

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

CloudMapper
CloudMapper

CloudMapper helps you analyze your Amazon Web Services environments.

gorgo
gorgo

The vertasile multi-threaded password sprayer built on the shoulders of giants.

EarlyBird
EarlyBird

Sensitive data detection tool capable of scanning source code repositories.

Invoke-ADEnum
Invoke-ADEnum

Automate Active Directory Enumeration using PowerView.

IntruderPayloads
IntruderPayloads

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

De4py
De4py

toolkit for python reverse engineering.

Damn Vulnerable Bank
Damn Vulnerable Bank

A vulnerable Android application with an interface to test your mobile hacking skills.

CMSmap
CMSmap

CMS scanner that automates the process of detecting security flaws of the most popular CMSs.