Top-rated tools trusted by the cybersecurity community
Search the Wayback Machine for specific historical files which may contain sensitive data.
GitHound hunts down exposed API keys and other sensitive information on GitHub with code search, pattern matching, and commit history searching.
This will perform your full recon including some vulnerability scanning. Scriptjacker tool by Parth Narula.
Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)
Find tools organized by testing methodology and use case
Videos, podcasts, and articles about penetration testing