YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Sqlmap is an open source tool used to test the SQL injection vulnerabilities within web…

Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

ARPwner is a GUI based tool that can perform tasks like ARP and DNS spoofing.…

CMSeek is an open-source tool that analyzes the regex of websites in order to detect…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…

Tmux is a terminal multiplexer: which in lamen terms means it is able to create…