Take it like a gift

Knock Subdomain Scan.

A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.

Identify Joomla version, scan for vulnerabilities and sensitive files.

Convolutional neural network for analyzing pentest screenshots.

Tag based conversion tool written in Java implemented as a Burp Suite extension.

Check for dozens of common best-practices around deploying Docker containers in production.

JavaScript Object Signing and Encryption Pentesting Helper.

toolkit for python reverse engineering.

A vulnerable Android application with an interface to test your mobile hacking skills.

DS_Store file parser/viewer.

CRLF and open redirect fuzzer.

Advanced discovery of Privileged Accounts, includes Shadow Admins.

An ICMP reverse shell written in Python3 and scapy.

An automated S3-compatible bucket inspector.

Series of tools for attacking MS Kerberos implementations.