Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Recon-ng is a reconnaissance framework that can perform open source web based information gathering for…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

CMSeek is a python tool that is used to detect Content Management System (CMS) within…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Cmsmap is a python based CMS scanner for automating the process of vulnerability assessment in…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Spiderfoot is an open source tool used for reconnaissance purpose. The tool is capable of…

Morpheus is an open source framework that can launch multiple attacks on the network using…

Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Today I have a tool that exploits insecure file shares and allows penetration testers to…