Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

BadKarma is a GUI based network reconnaissance tool that can gather useful network information at…

Malware showcase is a Github repository that contains examples of malware usage and behavior, this…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

The macro_pack is a tool for automating obfuscation in an MS document or VBS script…

Winpayloads is a python based tool which combines some of the Powershell Empire features along…

Spiderfoot is an open source tool used for reconnaissance purpose. The tool is capable of…

Tplmap is a python tool that can find code injection and Server Side Templates Injection…

Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

Ffuf – Fuzz Faster U Fool is a great tool used for fuzzing. It has…