Take it like a gift

getJS
getJS

A tool to fastly get all javascript sources/files.

Kwetza
Kwetza

Infect an existing Android application with a Meterpreter payload.

SweetPotato
SweetPotato

A collection of various Windows privilege escalation techniques from service accounts to SYSTEM.

LiveTargetsFinder
LiveTargetsFinder

Generates lists of live hosts and URLs.

pingcastle
pingcastle

Get Active Directory security at 80% in 20% of the time.

Smogcloud
Smogcloud

Find cloud assets that no one wants exposed.

Shodan
Shodan

Search engine for Internet-connected devices.

Sguil
Sguil

The analyst console for network security monitoring.

SBOMb
SBOMb

SBOM parser that performs cursory vulnerability assessment.

PyShell
PyShell

Multiplatform Python webshell.

SSRF Detector
SSRF Detector

Server-side request forgery detector.

Puncia
Puncia

Official CLI utility for Subdomain Center & Exploit Observer.

Prowler
Prowler

Open Source Security tool to perform Cloud Security best practices

Striker
Striker

Offensive information and vulnerability scanner.

WeirdAAL
WeirdAAL

AWS Attack Library.