YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …

I found this one while doings some research on BadUSBs and thought it would be…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Got a huge list of targets that you’d like to enumerate but can’t really visit…

Definition Whatweb is web scanner written in Ruby to identify and recognise technologies used by…

Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Spiderfoot is an open source tool used for reconnaissance purpose. The tool is capable of…

Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…