Evilgrade is a modular framework that takes over target machines by injecting fake updates in…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…

KillShot is a penetration testing tool that can be used to gather useful information and…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Many times when you want to perform an exploitation to a windows target, you need…

I found this one while doings some research on BadUSBs and thought it would be…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

MassExploitConsole is a python based easy-to-use cli tool for executing exploits. It has a collection…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…