XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…

Today, we talk about SSLyze. SSLyze is a Python tool that can analyze the SSL…

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…

Brosec is an open source terminal based tool to help all the security professionals generate…

What is Legion Legion is a semi-automated easy to use network penetration testing framework that…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Back again with more DNS enumeration tools. This one has been around for quite some…

What is JFScan? JFScan is a great enumeration tool  created by nullt3r written mainly in…

Many times when you want to perform an exploitation to a windows target, you need…

Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…