Take it like a gift

Perform OSINT scan on email/domain/ip address/organization.

Automating situational awareness for cloud penetration tests.

Linux enumeration tool for pentesting and CTFs with verbosity levels.

Find vulnerabilities, compliance issues and infrastructure misconfigurations in your IAC.

John Hammond YouTube channel.

A tool for automated security scanning of web applications.

Simple python script to check against hypothetical JWT vulnerability.

Scans the top 500 sites daily for their security.txt file or DNS records.

The Swiss Army knife for automated Web Application Testing

A fast DOM based XSS vulnerability scanner with simplicity.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

Identify routers on the local LAN and paths to the Internet.

JSON Beautifier for Burp written in Java.

A Git source leak exploit tool that restores the entire Git repository, including data from stash.

Crack hashes in seconds.