YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

What is JFScan? JFScan is a great enumeration tool  created by nullt3r written mainly in…

What is GRR? This incident response framework is an open source tool used for live…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Definition Whatweb is web scanner written in Ruby to identify and recognise technologies used by…

Many times when you want to perform an exploitation to a windows target, you need…

So you have been tasked with performing a penetration test of the internet-facing systems of…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

KillShot is a penetration testing tool that can be used to gather useful information and…

AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…