PhishX is a python tool that can capture user credentials using a spear phishing attack.…

Wifi Pumpkin is a security audit framework used to test the security of wifi against…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

So you have been tasked with performing a penetration test of the internet-facing systems of…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

What is WSL? Some of you may have noticed that I have been running my…