Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Dirhunt is a python tool that can quickly search directories on target domains to find…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

CMSeek is a python tool that is used to detect Content Management System (CMS) within…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Sn1per is an automated scanner that can be used during a penetration test to enumerate…

What is GRR? This incident response framework is an open source tool used for live…

Recon-ng is a reconnaissance framework that can perform open source web based information gathering for…

ARPwner is a GUI based tool that can perform tasks like ARP and DNS spoofing.…

The Evil Access Point (AP) attack has been around for a long time. There are…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…