Recon-ng is a reconnaissance framework that can perform open source web based information gathering for…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Sn1per is an automated scanner that can be used during a penetration test to enumerate…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…

Evilginx is framework that is able to steal user credentials through a man in the…

Final Recon is a useful tool for gathering data about a target from open source…

Back again with more DNS enumeration tools. This one has been around for quite some…

We’re back again with another banger from Dan Miessler so if you liked the post…

CMSeek is a python tool that is used to detect Content Management System (CMS) within…

cSploit is now considered EOL and is not being updated by the developers. Current version…