Packages

Information Gathering

sqlmap Automatic SQL injection and database takeover tool
Striker Recon & Vulnerability Scanning Suite
Sublist3r Fast subdomains enumeration tool for penetration testers
sherlock Hunt down social media accounts by username across social networks
S3Scanner A tool to find open S3 buckets and dump their contents
gitGraber Search and find sensitive data in real time for GitHub
HydraRecon Simple recon tool

Networking

nmap the Network Mapper
bettercap Swiss army knife for network attacks and monitoring

Web Apps

XSStrike Advanced XSS Detection Suite
Photon Incredibly fast crawler designed for OSINT

Passwords

cupp Common User Passwords Profiler
Cr3d0v3r Your best friend in credential reuse attacks
Hash-Buster Why crack hashes when you can bust them?
changeme A default credential scanner
traitor ⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Obfuscation

Cuteit IP obfuscator made to make a malicious ip a bit cuter