Take it like a gift

Small tool to grab subdomains using Shodan API.

Finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.

Powerfull XSS Scanning and Parameter analysis tool&gem.

Scrape domain names from SSL certificates of arbitrary hosts.

Automatic Linux privilege escalation via exploitation of low-hanging fruit.

Fully customizable Windows-based pentesting virtual machine distribution.

Robots.txt audit tool.

Vulnerability static analysis for containers.

VM that is built from the ground up with a large amount of security vulnerabilities.

Active Directory Certificate Services enumeration and abuse.

Advanced fuzzing librar. Slot your fuzzers together and extend their features using Rust.

A PowerShell toolkit for attacking SQL Server.

Takes a single wordlist item and tests it one by one over a large collection of websites.

Powerful open source XSS scanning tool and parameter analyzer.

Network infrastructure configuration parser.