Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Evilginx is framework that is able to steal user credentials through a man in the…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Back again with more DNS enumeration tools. This one has been around for quite some…

What is BinGoo? Welcome to BinGoo, the all-in-one dorking tool written in bash. It uses…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Empire is regarded as one of the most useful frameworks by many penetration testers. It…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Based on python, the Veil-Framework is one of the most popular tools for Anti-Virus evasion.…

Zeus scanner is an open source tool used for reconnaissance and vulnerability assessments of web…

Trape is a tool written in python that can aid in tracking a client after…