Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…

Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…

SecLists is a pentesting tool used by security professionals around the globe, it contains various…

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…

East is a Python based security framework toolkit. It acts as a HTTP server and…

Recon-ng is a reconnaissance framework that can perform open source web based information gathering for…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

KillShot is a penetration testing tool that can be used to gather useful information and…