Take it like a gift

Incredibly fast crawler designed for OSINT.

The global gold standard in vulnerability assessment built for the modern attack surface.

Check egress filtering and identify if ports are allowed to automatically spawn a shell.

A multi-platform fuzzer for poking at userland binaries and servers.

Active Directory Report Tool.

Unleash metadata intelligence, bridging the chasm in metadata extraction and analysis.

A dynamic deception tool that actively deceives an attacker.

Automatic authorization enforcement detection extension for Burp Suite.

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.

Scans the top 500 sites daily for their security.txt file or DNS records.

A little tool to play with Windows security.

A powerful shell script to maximize the recon and data collection process.

Nikto web server scanner.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Generate javascript code to be injected in case you find a Server Side Javascript Injection.