Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Zarp is a powerful tool used for scanning and attacking networks. The tool is capable…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

DumpsterFire is an open-source tool made by blue team member to edit create and control…