Take it like a gift

A list of DNS providers and how to claim (sub)domains via missing hosted zones.

Checks expired domains to determine good candidates for phishing and C2 domain names.

Google Dork File Finder.

Generate similar-looking domains for phishing attacks.

A Linux privilege escalation check script.

A tool to hunt for credentials in GitHub wild AKA git*hunt.

Grab NetNTLMv2 hashes using ETW with administrative rights on Windows.

Free and open source network security tool for man-in-the-middle attacks on a LAN.

Automates the discovery and pwnage of ACLs in Active Directory that are unsafe configure.

Use favicon.ico to improve your target recon phase.

The all-in-one browser extension for offensive security professionals.

A Tool for Domain Flyovers.

Automatic tool for DNS rebinding-based SSRF attacks.

Dex to Java decompiler.

Generate wordlist based on the URLs to check for backup, installation, etc files.