Take it like a gift

reDuh
reDuh

Create a TCP circuit through validly formed HTTP requests.

Hawkeye
Hawkeye

Filesystem analysis tool/directory looking for interesting stuff.

DNSTracer
DNSTracer

Trace the path of a DNS query.

Built With
Built With

Find out what websites are Built With.

BlueHound
BlueHound

Pinpoint the security issues that actually matter.

dufflebag
dufflebag

Search exposed EBS volumes for secrets.

LeakLooker-X
LeakLooker-X

Discover, browse and monitor database/source code leaks.

autoSubTakeover
autoSubTakeover

A tool used to check if a CNAME resolves to the scope address.

Ciphey
Ciphey

Automates decryptions & decodings with encodings, classical ciphers, hashes, or more.

jok3r
jok3r

Network and Web Pentest Automation Framework.

JS-Tap
JS-Tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.

EyeSpy
EyeSpy

Designed to enumerate and gain access to IP cameras via RTSP.

authz
authz

Burp Suite plugin to test for authorization flaws.

ADAPE Script
ADAPE Script

Active Directory assessment and privilege escalation script.

Krakatau
Krakatau

Java decompiler, assembler, and disassembler.