Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Today I have a tool that exploits insecure file shares and allows penetration testers to…

NoSQLMap is an open source python based tool, designed to audit and automate injection attacks…

AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…

Altair is a Python tool that can be used to scan for web related vulnerabilities,…

Red Hawk is an open source tool that is used for information gathering and certain…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Empire is regarded as one of the most useful frameworks by many penetration testers. It…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…

Definition Whatweb is web scanner written in Ruby to identify and recognise technologies used by…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…