XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Back again with more DNS enumeration tools. This one has been around for quite some…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…

Red Hawk is an open source tool that is used for information gathering and certain…

Leviathan is an open source toolkit that can be used for auditing networks and web…

KillShot is a penetration testing tool that can be used to gather useful information and…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Nmap Automator is a great tool for initial port scans of a given ip address.…