Take it like a gift

NahamSec
NahamSec

NahamSec Twitch channel.

endext
endext

A tool for extracting all the possible endpoints from the JS files.

dnstwist_
dnstwist_

A tool to monitor for potential spear phishing domains and send to Slack.

cadaver
cadaver

Command-line WebDAV client.

cerbrutus
cerbrutus

Network brute force tool, faster than other existing solutions.

bountyplz
bountyplz

Automated security reporting from markdown templates.

brutespray
brutespray

Automatically attempts default creds on found services based on Nmap output.

Betterscan
Betterscan

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.

cero
cero

Scrape domain names from SSL certificates of arbitrary hosts.

capa
capa

The FLARE team's open-source tool to identify capabilities in executable files.

Can I Take Over DNS?
Can I Take Over DNS?

A list of DNS providers and how to claim (sub)domains via missing hosted zones.

Atomic Red Team
Atomic Red Team

Small and highly portable detection tests based on MITRE's ATT&CK.

burp-vulners-scanner
burp-vulners-scanner

Vulnerability scanner based on vulners.com search API.

Built With
Built With

Find out what websites are Built With.

broken-link-hijacking
broken-link-hijacking

Broken Link Hijacking Burp Suite extension.