XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Thinking someone is spying on you is one of the most unsettling feelings ever, I…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Morpheus is an open source framework that can launch multiple attacks on the network using…

Red Hawk is an open source tool that is used for information gathering and certain…

Nuclei is a tool that is used to send requests across the given target based…

Security company NCC Group have released an open source tool for penetration testing named Singularity,…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

MassBleed is an open source tool used for scanning SSL vulnerabilities in web applications. The…