rainmekka,github

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

android-ssl-trustkiller

Bypass SSL certificate pinning for most applications

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

bettercap

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

cheat allows you to create and view interactive cheatsheets on the command-line. It was designed to help remind *nix system administrators of options for commands that they use frequently, but not frequently enough to remember.

cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings; Evade DLP/MLS Devices; Defeat Data Whitelisting Controls; Social Engineering of Analysts; Evade AV Detection

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

dbdat

Db Database Assessment Tool

devguide

The OWASP Guide

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!