XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Today I have a tool that exploits insecure file shares and allows penetration testers to…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

Winpayloads is a python based tool which combines some of the Powershell Empire features along…

Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

The Evil Access Point (AP) attack has been around for a long time. There are…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Cl0neMast3r is a Python script that was coded to make your life easier. It allows the user…