dnscan (https://github.com/rbsec/dnscan)
Knockpy (https://github.com/guelfoweb/knock)
Sublist3r (https://github.com/aboul3la/Sublist3r)
massdns (https://github.com/blechschmidt/massdns)
nmap (https://nmap.org)
masscan (https://github.com/robertdavidgraham/masscan)
EyeWitness (https://github.com/ChrisTruncer/EyeWitness)
DirBuster (https://sourceforge.net/projects/dirbuster/)
dirsearch (https://github.com/maurosoria/dirsearch)
Gitrob (https://github.com/michenriksen/gitrob @myhackersworld)
git-secrets (https://github.com/awslabs/git-secrets)
sandcastle (https://github.com/yasinS/sandcastle)
bucket_finder (https://digi.ninja/projects/bucket_finder.php)
GoogD0rker (https://github.com/ZephrFish/GoogD0rker/)
Wayback Machine (https://web.archive.org)
waybackurls (https://gist.github.com/mhmdiaa/adf6bff7...1d4b372050 Sn1per https://github.com/1N3/Sn1per/)
XRay (https://github.com/evilsocket/xray)
wfuzz (https://github.com/xmendez/wfuzz/)
patator (https://github.com/lanjelot/patator)
datasploit (https://github.com/DataSploit/datasploit)
hydra (https://github.com/vanhauser-thc/thc-hydra)
changeme (https://github.com/ztgrace/changeme)
MobSF (https://github.com/MobSF/Mobile-Security...ork-MobSF/ Apktool https://github.com/iBotPeaches/Apktool)
dex2jar (https://sourceforge.net/projects/dex2jar/)
sqlmap (http://sqlmap.org/)
oxml_xxe (https://github.com/BuffaloWill/oxml_xxe/ @myhackersworld)
XXE Injector https://github.com/enjoiz/XXEinjector
The JSON Web Token Toolkit https://github.com/ticarpi/jwt_tool
ground-control https://github.com/jobertabma/ground-control
ssrfDetector https://github.com/JacobReynolds/ssrfDetector
LFISuit https://github.com/D35m0nd142/LFISuite
GitTools https://github.com/internetwache/GitTools
dvcs-ripper https://github.com/kost/dvcs-ripper
tko-subs https://github.com/anshumanbh/tko-subs
HostileSubBruteforcer https://github.com/nahamsec/HostileSubBruteforcer Race the Web https://github.com/insp3ctre/race-the-web
ysoserial https://github.com/GoSecure/ysoserial
PHPGGC https://github.com/ambionics/phpggc
CORStest https://github.com/RUB-NDS/CORStest
retire-js https://github.com/RetireJS/retire.js
getsploit https://github.com/vulnersCom/getsploit
Findsploit https://github.com/1N3/Findsploit
bfac https://github.com/mazen160/bfac
WPScan https://wpscan.org/