Take it like a gift

certs.io
certs.io

Search the entire internet by data in TLS certificates.

Turbolist3r
Turbolist3r

Subdomain enumeration tool with analysis features for discovered domains.

pydictor
pydictor

A powerful and useful hacker dictionary builder for a brute-force attack.

SaaS Sentinel
SaaS Sentinel

Be notified when your favorite tool may be at risk.

MalwareSourceCode
MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming la.

param-miner
param-miner

Identifies hidden, unlinked parameters, useful for finding web cache poisoning vulnerabilities.

RustHound
RustHound

Active Directory data collector for BloodHound written in Rust.

mfoc
mfoc

Mifare classic offline cracker.

owasp MASTG
owasp MASTG

Comprehensive manual for mobile application security testing and reverse engineering.

RevShells
RevShells

Hosted Reverse Shell generator with a ton of functionality.

Security Monkey
Security Monkey

Monitor AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

Mimicry
Mimicry

A dynamic deception tool that actively deceives an attacker.

s3recon
s3recon

Amazon S3 bucket finder and crawler.

nipper-ng
nipper-ng

Network infrastructure configuration parser.

Scopify
Scopify

Netify.ai reconnaissance tool.