YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

NoSQLMap is an open source python based tool, designed to audit and automate injection attacks…

PhishX is a python tool that can capture user credentials using a spear phishing attack.…

Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Malware showcase is a Github repository that contains examples of malware usage and behavior, this…

Cr3dOv3r is an open source tool that helps in finding credentials reuse attack for any…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

Raccoon is an offensive security tool known for reconnaissance and information gathering. The tool can…