Take it like a gift

Detect stegano-hidden data in PNG & BMP.

All In One Web Recon.

A Burp Suite extension that checks for the HTTPoxy vulnerability.

Domain name permutation engine for detecting several types of attacks.

Command-line WebDAV client.

Identify Joomla version, scan for vulnerabilities and sensitive files.

Linux enumeration tool for pentesting and CTFs with verbosity levels.

Anonymously bruteforce Active Directory usernames by abusing LDAP Ping requests.

A fast and minimal JS endpoint extractor.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

Scanning APK file for URIs, endpoints & secrets.

Quickly find and fix the vulnerabilities that put your web applications at risk of attack.

Enumerate Google Storage buckets, check the access and if they can be privilege escalated.

Find and analyze private/public key files and Android APK files.

Basically a regexp over a GitHub search.