Take it like a gift

windapsearch
windapsearch

Enumerate users, groups and computers from a Windows domain through LDAP queries.

hauditor
hauditor

Analyze the security headers returned by a web page and report dangerous configurations.

Kerbeus-BOF
Kerbeus-BOF

Beacon Object Files for Kerberos abuse.

hcxdumptool
hcxdumptool

Small tool to capture packets from wlan devices.

Fierce
Fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

Headless Burp
Headless Burp

Provides a suite of extensions and a maven plugin to automate security tests using Burp Suite.

keyhacks.sh
keyhacks.sh

Automation of tokens/api keys testing.

HTTP Request Smuggler
HTTP Request Smuggler

Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.

Hamburglar
Hamburglar

Collect useful information from urls, directories, and files.

fuzzagotchi
fuzzagotchi

A fuzzing tool written in Go. It helps your pentesting journey.

json-web-tokens
json-web-tokens

JSON Web Tokens Support for Burp Suite.

JSParser
JSParser

Python script to parse relative URLs from JavaScript files.

Gatekeeper
Gatekeeper

Policy controller for Kubernetes.

HARpwn
HARpwn

Designed to streamline the extraction and sanitization of HARTokens from HTTP archives.

hoaxshell
hoaxshell

Windows reverse shell payload generator and handler that abuses the http(s) protocol.