So you have been tasked with performing a penetration test of the internet-facing systems of…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Droopescan is a python based scanner that is used to scan the web applications that…

With Sherlock you can search across a vast number of social platforms for a username.…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…

BoomER is a Command-line interface python open-source framework fully developed in Python 3.X for post-exploitation…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

Galileo is a free web application auditing framework that can perform various penetration testing tasks,…