Take it like a gift

Post-exploitation framework designed to assist with lateral movement within Active Directory.

The most comprehensive Postman recon / OSINT client and framework.

Monitors Github for leaked secrets.

Probe endpoints consuming Java serialized objects for fingerprinting.

Learn Web Penetration Testing: The Right Way.

Adversary emulation framework.

Reverse shell based on sshd supporting DNS and ICMP tunnelling as well as HTTP and Socks proxies.

A drop-in replacement for Nmap powered by shodan.io.

Powershell payload generator In Bash !

Find subdomains by searching public certificate records.

Lets you use Burp Collaborator as a DNS server for exfiltrating data via Sqlmap.

Security Tool to Look For Interesting Files in S3 Buckets.

Enumerate an Active Directory environment with LDAP queries.

Dangerously fast DNS/network/port scanner.

A DNS meta-query spider that enumerates DNS records, and subdomains.