Take it like a gift

GhostTrack
GhostTrack

Useful tool to track location or mobile number.

GCPBucketBrute
GCPBucketBrute

Enumerate Google Storage buckets, check the access and if they can be privilege escalated.

w3af
w3af

Web Application Attack and Audit Framework.

Pspy
Pspy

Unprivileged Linux process snooping.

s3cXSSer
s3cXSSer

This extension will help you to detect GET/POST based XSS vulnerability in any website easily.

personal-security-checklist
personal-security-checklist

A compiled checklist of 300+ tips for protecting digital security and privacy.

qsfuzz
qsfuzz

qsfuzz is a tool that allows to write simple rules in YAML that define what value to inject

PowerMeta
PowerMeta

Searches for publicly available files hosted on various websites for a particular domain.

Prowler
Prowler

Open Source Security tool to perform Cloud Security best practices

postmaniac
postmaniac

Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces.

Photon
Photon

Incredibly fast crawler designed for OSINT.

OSV
OSV

A distributed vulnerability database for Open Source.

HackerSploit
HackerSploit

HackerSploit YouTube channel.

pingcastle
pingcastle

Get Active Directory security at 80% in 20% of the time.

Kekeo
Kekeo

A little toolbox to play with Microsoft Kerberos in C.