Take it like a gift

CDN Proxy
CDN Proxy

Create a copy of a targeted website with CDN and WAF restrictions disabled.

ACLight
ACLight

Advanced discovery of Privileged Accounts, includes Shadow Admins.

detect-secrets
detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

NetProbe
NetProbe

A tool you can use to scan for devices on your network.

vbscan
vbscan

A black box vBulletin vulnerability scanner.

Nosey Parker
Nosey Parker

Command-line tool that finds secrets and sensitive information in textual data and Git history.

oyente
oyente

An analysis tool for smart contracts.

RecurseBuster
RecurseBuster

Rapid content discovery tool for recursively querying webservers.

PcapXray
PcapXray

Visualize a packet capture offline as a network diagram including device identification.

NodeGoat
NodeGoat

Learn how OWASP Top 10 security risks apply to web applications developed using Node.js.

hakfindinternaldomains
hakfindinternaldomains

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Osmedeus
Osmedeus

A Workflow Engine for Offensive Security

GCPBucketBrute
GCPBucketBrute

Enumerate Google Storage buckets, check the access and if they can be privilege escalated.

gittyleaks
gittyleaks

Find sensitive information for a git repo.

Corsy
Corsy

CORS Misconfiguration Scanner.