What is JFScan? JFScan is a great enumeration tool  created by nullt3r written mainly in…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Morpheus is an open source framework that can launch multiple attacks on the network using…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

So what is this phishing tool all about? Blackeye is tool scripted in shell to…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…