XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Social Mapper is an open source tool that searches for profile information from social media…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

Tplmap is a python tool that can find code injection and Server Side Templates Injection…

Today I have a tool that exploits insecure file shares and allows penetration testers to…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

What is JFScan? JFScan is a great enumeration tool  created by nullt3r written mainly in…

What is msImpersonate? What’s up nerds! Captain AMayorica hooked us up again with another Microsoft…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

NoSQLMap is an open source python based tool, designed to audit and automate injection attacks…

So what is this Lynis tool all about? Lynis is a security tool used for…