So you have been tasked with performing a penetration test of the internet-facing systems of…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

Vega is a GUID based open source tool used for testing the security of web…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Evilginx is framework that is able to steal user credentials through a man in the…

MassBleed is an open source tool used for scanning SSL vulnerabilities in web applications. The…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Brutex is a shell based open source tool to make your work faster. It combines…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…

Sitadel is a python based web application scanner. It’s flexible and has many different scanning…