Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…

Many times when you want to perform an exploitation to a windows target, you need…

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

ARPwner is a GUI based tool that can perform tasks like ARP and DNS spoofing.…

SniffAir is an open source tool made for sophisticated wireless attacks and data capture, it…

Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

BoomER is a Command-line interface python open-source framework fully developed in Python 3.X for post-exploitation…

Got a huge list of targets that you’d like to enumerate but can’t really visit…