I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

Webvulnscan is a web application scanner that automates vulnerability assessment tasks. The tool can automatically…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

Cloakify Factory is a tool to transforms any file type into a list of harmless…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Brutex is a shell based open source tool to make your work faster. It combines…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

MassBleed is an open source tool used for scanning SSL vulnerabilities in web applications. The…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…