Take it like a gift

Generates wordlists from the Burp sitemap.

A fast, simple, recursive content discovery tool written in Rust.

Enumerate users, groups and computers from a Windows domain through LDAP queries.

Find misconfiguration through LDAP to exploit weaknesses with Kerberos.

The only cheat sheet you need.

Network sniffer that captures and analyzes packets off the wire.

This script enumerates the permissions of all the AWS principals of an account.

Plugin-based tool to scan public version control systems for sensitive information.

Perform permutations, mutations and alteration of subdomains.

Enumerate usernames across many websites.

Request the public disclosures on a specific HackerOne program.

Crawls URL to get a better image of what is tied to a website.

Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.

Secrets scanner that understands code.

Nikto for Windows with some extra features.