Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Zeus scanner is an open source tool used for reconnaissance and vulnerability assessments of web…

Security company NCC Group have released an open source tool for penetration testing named Singularity,…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…