Take it like a gift

socialhunter
socialhunter

Crawls the website and finds broken social media links that can be hijacked

o365recon
o365recon

Retrieve information via O365 and AzureAD with valid credentials.

PwnDoc
PwnDoc

Pentest report generator.

magspoof
magspoof

A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card wirelessly.

malicious-pdf
malicious-pdf

Generates a bunch of malicious pdf files with phone-home functionality.

lynis
lynis

Security auditing tool for Linux, macOS, and UNIX-based systems.

RED HAWK
RED HAWK

All in one tool for information gathering, vulnerability scanning and crawling.

QBinDiff
QBinDiff

Experimental binary diffing tool addressing the diffing as a aetwork alignement quadratic problem.

SecretFinder
SecretFinder

SecretFinder is a script based on LinkFinder, written to find sensitive data in JavaScript files.

scan-check-builder
scan-check-builder

Burp Suite extension which helps to improve the active and passive scanner by yourself.

MassDNS
MassDNS

A high-performance DNS stub resolver for bulk lookups and reconnaissance.

Trivy
Trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, repositories...

Maltego
Maltego

Open source intelligence and forensics application.

spraykatz
spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

talisman
talisman

Validate the outgoing changeset for things that look suspicious such as tokens, passwords and keys.