Take it like a gift

OpenBuckets
OpenBuckets

Online platform for finding open buckets in cloud storage systems effortlessly.

Microsploit
Microsploit

Quickly and easily create backdoor Office exploitation using module Metasploit packet.

Nginxpwner
Nginxpwner

Simple tool to look for common Nginx misconfigurations and vulnerabilities.

weevely3
weevely3

Weaponized web shell.

Tracy
Tracy

Assists with finding all sinks and sources of a webapp and display the results in a nice way.

SSRFire
SSRFire

An automated SSRF finder. Just give the domain name and your server and chill!

ShapeShifter
ShapeShifter

GraphQL security testing tool.

server-side-prototype-pollution
server-side-prototype-pollution

Identifies server-side prototype pollution vulnerabilities.

The PenTesters Framework
The PenTesters Framework

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

sliver
sliver

Adversary emulation framework.

sops
sops

Simple and flexible tool for managing secrets.

tsunami-security-scanner
tsunami-security-scanner

Network security scanner with an extensible plugin system.

sonarqube
sonarqube

Continuous inspection.

sqlmap
sqlmap

Automatic SQL injection and database takeover tool.

Sherlock
Sherlock

Hunt down social media accounts by username across social networks.