XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

SecLists is a pentesting tool used by security professionals around the globe, it contains various…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

Droopescan is a python based scanner that is used to scan the web applications that…

Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

The macro_pack is a tool for automating obfuscation in an MS document or VBS script…

Winpayloads is a python based tool which combines some of the Powershell Empire features along…

Pythem is a python framework used for performing various security tests on networks and web…

NoSQLMap is an open source python based tool, designed to audit and automate injection attacks…

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…