SecLists is a pentesting tool used by security professionals around the globe, it contains various…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Altair is a Python tool that can be used to scan for web related vulnerabilities,…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

Sqlmap is an open source tool used to test the SQL injection vulnerabilities within web…

Webvulnscan is a web application scanner that automates vulnerability assessment tasks. The tool can automatically…

Security company NCC Group have released an open source tool for penetration testing named Singularity,…

Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…