Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Evilginx is framework that is able to steal user credentials through a man in the…

DNSRecon is a python script used for DNS information gathering.  DNS information about a target…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

What is Infection Monkey? Infection Monkey is an open-source breach and attack simulation tool for…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

Definition Whatweb is web scanner written in Ruby to identify and recognise technologies used by…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

TheFatRat is an easy to use tool which helps in generating backdoors, system exploitation, post…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…