XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

cSploit is now considered EOL and is not being updated by the developers. Current version…

TIDoS framework is a python based toolkit that performs a comprehensive audit of the web…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

NoSQLMap is an open source python based tool, designed to audit and automate injection attacks…

Zeus scanner is an open source tool used for reconnaissance and vulnerability assessments of web…

Today I have a tool that exploits insecure file shares and allows penetration testers to…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Wifi Pumpkin is a security audit framework used to test the security of wifi against…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…