rbsec

sslscan. sslscan tests SSL/TLS enabled services to discover supported cipher suites

dnscan. Python

pentest. Various pentest stuff

headerget. Get version headers from a list of websites

bsparser. bsparser

pwdumpstats. Script to output stats around weak passwords and password re-use from an NtdsAudit (pwdump) file

scripts. Miscellaneous scripts

john. John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

cw. Colorwrapper

NetHack. Official NetHack Git Repository

magicmapping. Script to find exploitable magic methods for PHP object injection

ShareAudit. A tool for auditing network shares in an Active Directory environment

infosec.mozilla.org. Guidelines, principles published on https://infosec.mozilla.org

wstg. The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.