Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

The Evil Access Point (AP) attack has been around for a long time. There are…

Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

DNSRecon is a python script used for DNS information gathering.  DNS information about a target…

I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …

I found this one while doings some research on BadUSBs and thought it would be…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Recon-ng is a reconnaissance framework that can perform open source web based information gathering for…

Httpx is a fast and multi-purpose HTTP toolkit that allows the user to run multiple…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…