Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Recon-ng is a reconnaissance framework that can perform open source web based information gathering for…

Evilgrade is a modular framework that takes over target machines by injecting fake updates in…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Cl0neMast3r is a Python script that was coded to make your life easier. It allows the user…

So what is this phishing tool all about? Blackeye is tool scripted in shell to…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…

Based on python, the Veil-Framework is one of the most popular tools for Anti-Virus evasion.…