Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Webpwn3r is a powerful scanning tool, written in Python, to detect remote command execution vulnerabilities,…

Nuclei is a tool that is used to send requests across the given target based…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

Tmux is a terminal multiplexer: which in lamen terms means it is able to create…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Zeus scanner is an open source tool used for reconnaissance and vulnerability assessments of web…

SecLists is a pentesting tool used by security professionals around the globe, it contains various…