Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

East is a Python based security framework toolkit. It acts as a HTTP server and…

Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Wifiphisher is an open source framework that can be utilised for red team engagements for…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Morpheus is an open source framework that can launch multiple attacks on the network using…

TheFatRat is an easy to use tool which helps in generating backdoors, system exploitation, post…