Take it like a gift

ParamSpider
ParamSpider

Mining parameters from dark corners of Web Archives.

mitmproxy
mitmproxy

An interactive TLS-capable intercepting HTTP proxy.

Oralyzer
Oralyzer

Open Redirection Analyzer.

Pop
Pop

Send emails from your terminal.

Nishang
Nishang

Offensive PowerShell for red team, penetration testing and offensive security.

merlin
merlin

Cross-platform post-exploitation HTTP/2 Command & Control server and agent.

Tracy
Tracy

Assists with finding all sinks and sources of a webapp and display the results in a nice way.

karma v2
karma v2

Passive open source intelligence automated reconnaissance.

dnscat2
dnscat2

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

HackTricks
HackTricks

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

crowdsec
crowdsec

Offers crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

SpiderFoot
SpiderFoot

Automates OSINT for threat intelligence and mapping your attack surface.

Sn1per
Sn1per

Attack Surface Management Platform.

harpoon
harpoon

CLI tool for open source and threat intelligence.

Shadow Workers
Shadow Workers

C2 and proxy designed to help in the exploitation of XSS and malicious Service Workers.