XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Cloakify Factory is a tool to transforms any file type into a list of harmless…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

Evilgrade is a modular framework that takes over target machines by injecting fake updates in…

Powershell-RAT is a Python and Powershell script tool that has been made to help a pen…

Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Sqlmap is an open source tool used to test the SQL injection vulnerabilities within web…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

What is a Brakeman? in the 1800s a brakeman was a rail worker responsible for…

What is msImpersonate? What’s up nerds! Captain AMayorica hooked us up again with another Microsoft…