Dirhunt is a python tool that can quickly search directories on target domains to find…

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

Evilgrade is a modular framework that takes over target machines by injecting fake updates in…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

Spiderfoot is an open source tool used for reconnaissance purpose. The tool is capable of…

Evilginx is framework that is able to steal user credentials through a man in the…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Tmux is a terminal multiplexer: which in lamen terms means it is able to create…

Cr3dOv3r is an open source tool that helps in finding credentials reuse attack for any…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…