Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…

Sn1per is an automated scanner that can be used during a penetration test to enumerate…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Droopescan is a python based scanner that is used to scan the web applications that…

PhishX is a python tool that can capture user credentials using a spear phishing attack.…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Dirhunt is a python tool that can quickly search directories on target domains to find…

DNSRecon is a python script used for DNS information gathering.  DNS information about a target…

Wifi Pumpkin is a security audit framework used to test the security of wifi against…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Spiderfoot is an open-source tool used for reconnaissance. It is capable of gathering open-source information…