#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
anthemtotheego/sharpsploitconsoleC# console application for post-exploitation and red team operations, integrating SharpSploit to execute Mimikatz commands, perform Kerberoasting,…
atmoner/twitwork✨ Monitor twitter stream from nodejs electron
random-robbie/jira-scanCVE-2017-9506 - SSRF
ksharinarayanan/sourcewolfAmazingly fast response crawler to find juicy stuff in the source code! 😎🔥
projectdiscovery/tldfinderA streamlined tool for discovering private TLDs for security research.
0xsearches/sandcastle🏰 A Python script for AWS S3 bucket enumeration.
localh0t/m4ngl3m3Common password pattern generator using strings list
nccgroup/gtfoblookupOffline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS),…
treebuilder/aad-sso-enum-brute-sprayPOC of SecureWorks' recent Azure Active Directory password brute-forcing vuln
sirbugs/endextExtracts all possible endpoints, URLs, and paths from JavaScript files using customizable regex patterns for web application reconnaissance and API…
solomonsklash/htbenumA Linux enumeration script for Hack The Box
stufus/reconeratorC# Targeted Attack Reconnissance Tools
exploits-forsale/prefetch-toolWindows KASLR bypass using prefetch side-channel
allyomalley/burpparamflaggerA Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.
skynet0x01/tugareconTugaRecon is an advanced subdomain reconnaissance and intelligence framework built for security researchers, penetration testers and OSINT…
shizzz477/msploitegoPentesting suite for Maltego based on data in a Metasploit database
improsec/improhoundIdentify the attack paths in BloodHound breaking your AD tiering
am0nt31r0/osint-searchUseful for digital forensics investigations or initial black-box pentest footprinting.
