I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Leviathan is an open source toolkit that can be used for auditing networks and web…

Habu is an open source penetration testing toolkit that can perform various penetration testing tasks…

Evilginx is framework that is able to steal user credentials through a man in the…

Cmsmap is a python based CMS scanner for automating the process of vulnerability assessment in…

Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…

Powershell-RAT is a Python and Powershell script tool that has been made to help a pen…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…

We’re back again with another banger from Dan Miessler so if you liked the post…