Take it like a gift

ReconNess
ReconNess

Continuous recon and pipeline tools setup.

Mimicry
Mimicry

A dynamic deception tool that actively deceives an attacker.

Nimbo-C2
Nimbo-C2

Yet another (simple and lightweight) C2 framework.

s3-buckets-finder
s3-buckets-finder

Find AWS S3 buckets and test their permissions.

pwncat
pwncat

Netcat on steroids with many extra features.

Scopein
Scopein

A Go tool for scope management.

phpsploit
phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.

Metagoofil
Metagoofil

Search Google and download specific file types.

ScreenShooter
ScreenShooter

Convert your masscan/subdomain-scan results into screenshots for better analysis.

OWASP
OWASP

A nonprofit foundation that works to improve the security of software.

qark
qark

Look for several security related Android application vulnerabilities.

lnkbomb
lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

Semgrep
Semgrep

Lightweight static analysis for many languages.

localdataHog
localdataHog

String-based secret-searching tool, high entropy and regexes.

SecretFinder
SecretFinder

SecretFinder is a script based on LinkFinder, written to find sensitive data in JavaScript files.