cSploit is now considered EOL and is not being updated by the developers. Current version…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Cr3dOv3r is an open source tool that helps in finding credentials reuse attack for any…

AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…

Red Hawk is an open source tool that is used for information gathering and certain…

4CAN V2 is a Raspberry Pi project created by the Cisco team in order to…

Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Evilginx is framework that is able to steal user credentials through a man in the…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…