Take it like a gift

ratproxy
ratproxy

A semi-automated largely passive web application security audit tool.

EvilClippy
EvilClippy

Create malicious MS Office documents to hide VBA macros, stomp VBA code.

commit-stream
commit-stream

OSINT tool for finding Github repositories by extracting commit logs in real time.

Commix
Commix

Automated All-in-One OS Command Injection Exploitation Tool.

CRLFsuite
CRLFsuite

The most powerful CRLF injection scanner.

CloudMapper
CloudMapper

CloudMapper helps you analyze your Amazon Web Services environments.

Cuckoo Sandbox
Cuckoo Sandbox

An automated dynamic malware analysis system.

CUPP
CUPP

Common User Passwords Profiler.

Cloudfox
Cloudfox

Automating situational awareness for cloud penetration tests.

Certify
Certify

Active Directory certificate abuse.

Corsy
Corsy

CORS Misconfiguration Scanner.

cvecrowd.com
cvecrowd.com

Lists CVEs that are currently being discussed on the social network Mastodon.

chainsaw
chainsaw

Rapidly search and hunt through windows forensic artefacts.

Comperio
Comperio

OSINT tool to find usernames across 80+ social media and social networking sites.

AttifyOS
AttifyOS

Distribution for pentesting IoT devices.