Take it like a gift

Shodan
Shodan

Search engine for Internet-connected devices.

Femida
Femida

Automated blind-xss search for Burp Suite.

hakip2host
hakip2host

Takes a list of IP addresses then does a series of checks to return associated domain names.

Burp-Wordlist-Generator
Burp-Wordlist-Generator

Generates wordlists from the Burp sitemap.

DOM based XSS finder
DOM based XSS finder

Chrome extension that finds DOM based XSS vulnerabilities.

LDAP Relay Scan
LDAP Relay Scan

Check for LDAP protections regarding the relay of NTLM authentication.

CloudRecon
CloudRecon

Finding assets and subdomains from certificates! Scan the web!

certmon
certmon

A simple certificate expiration monitor script.

checkov
checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time.

Hacker101
Hacker101

A free class for web security.

cheat.sh
cheat.sh

The only cheat sheet you need.

Arjun
Arjun

HTTP parameter discovery suite.

GeoWordlists
GeoWordlists

Generate wordlists of passwords containing cities at a defined distance around the client city.

bounty-targets-data
bounty-targets-data

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

CloakQuest3r
CloakQuest3r

Uncover the true IP address of websites safeguarded by Cloudflare & others.