Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

Back again with more DNS enumeration tools. This one has been around for quite some…

Reconnoitre is a tool that was created to automate routine actions within the OSCP lab…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Yuki Chan is an open source tool that automates some of the information gathering and…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

What is Infection Monkey? Infection Monkey is an open-source breach and attack simulation tool for…