Take it like a gift

volatility
volatility

The volatile memory extraction framework.

IntruderPayloads
IntruderPayloads

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

CertCrunchy
CertCrunchy

Uses data from SSL Certificates to find potential host names.

headi
headi

Customisable and automated HTTP header injection.

cve-collector
cve-collector

Simple latest CVE collector written in Python.

Hawkeye
Hawkeye

Filesystem analysis tool/directory looking for interesting stuff.

Amnesiac
Amnesiac

Post-exploitation framework designed to assist with lateral movement within Active Directory.

HackTools
HackTools

The all-in-one browser extension for offensive security professionals.

HackTricks
HackTricks

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

Haylxon
Haylxon

Blazing-fast tool to grab screenshots of your domain list right from terminal.

JWT cracker
JWT cracker

JWT brute force cracker written in C.

JS Recon Buddy
JS Recon Buddy

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

http-request-smuggling
http-request-smuggling

HTTP Request Smuggling Detection Tool.

403JUMP
403JUMP

HTTP 403 bypass tool.

Agartha
Agartha

Burp Suite extension for dynamic payload generation to detect injection flaws.