Take it like a gift

pass-station
pass-station

CLI & library to search for default credentials among thousands of products/vendors.

snallygaster
snallygaster

Tool to scan for secret files on HTTP servers.

LinkFinder
LinkFinder

A python script that finds endpoints in JavaScript files.

sonarqube
sonarqube

Continuous inspection.

Ligolo-ng
Ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

SonarSearch
SonarSearch

A rapid API for the project Sonar dataset.

Rock-ON
Rock-ON

All in one recon tool that just get a single domain name and do all of the work alone.

sqlmap
sqlmap

Automatic SQL injection and database takeover tool.

Swagger Jacker
Swagger Jacker

Designed to assist with auditing of exposed Swagger/OpenAPI) definition files.

Rubeus
Rubeus

Rubeus is a toolkit for Kerberos interaction and abuses.

PrivacyNet
PrivacyNet

Allow users to route Internet traffic through Tor and hide their real IP address.

timesketch
timesketch

Collaborative forensic timeline analysis.

SDBF
SDBF

Smart DNS Brute Forcer.

metahttp
metahttp

Script that automates the scanning of a target network for HTTP resources through XXE.

t14m4t
t14m4t

Automated brute-forcing attack tool.