Take it like a gift

Photon
Photon

Incredibly fast crawler designed for OSINT.

Nessus
Nessus

The global gold standard in vulnerability assessment built for the modern attack surface.

egressbuster
egressbuster

Check egress filtering and identify if ports are allowed to automatically spawn a shell.

litefuzz
litefuzz

A multi-platform fuzzer for poking at userland binaries and servers.

ADRT
ADRT

Active Directory Report Tool.

MetaDetective
MetaDetective

Unleash metadata intelligence, bridging the chasm in metadata extraction and analysis.

Mimicry
Mimicry

A dynamic deception tool that actively deceives an attacker.

Autorize
Autorize

Automatic authorization enforcement detection extension for Burp Suite.

lorsrf
lorsrf

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.

findsecuritycontacts.com
findsecuritycontacts.com

Scans the top 500 sites daily for their security.txt file or DNS records.

mimikatz
mimikatz

A little tool to play with Windows security.

MagicRecon
MagicRecon

A powerful shell script to maximize the recon and data collection process.

Nikto
Nikto

Nikto web server scanner.

hakfindinternaldomains
hakfindinternaldomains

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

JSgen
JSgen

Generate javascript code to be injected in case you find a Server Side Javascript Injection.