YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Trape is a tool written in python that can aid in tracking a client after…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…

So you have been tasked with performing a penetration test of the internet-facing systems of…

Final Recon is a useful tool for gathering data about a target from open source…

Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Cr3dOv3r is an open source tool that helps in finding credentials reuse attack for any…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Reconnoitre is a tool that was created to automate routine actions within the OSCP lab…