The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.

A list of public penetration test reports published by several consulting firms and academic security groups.

A swiss army knife for pentesting networks

Create and modify Word documents with Python

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

Security Tool to Look For Interesting Files in S3 Buckets

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

O-Saft - OWASP SSL advanced forensic tool

Python tool to check for expired domains still allowed in crossdomain.xml files