Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

I came across this python script that can perform SSH login bruteforce attacks and decided…

Powershell-RAT is a Python and Powershell script tool that has been made to help a pen…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Nmap Automator is a great tool for initial port scans of a given ip address.…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …

BLACKEYE is a LAN phishing tool that can clone more than 30 networks templates to…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…