W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…

Vega is a GUID based open source tool used for testing the security of web…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

PhishX is a python tool that can capture user credentials using a spear phishing attack.…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

We’re back again with another banger from Dan Miessler so if you liked the post…

RapidScan is a python based scanning tool used for analyzing vulnerabilities in web applications. The…

What is Infection Monkey? Infection Monkey is an open-source breach and attack simulation tool for…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…

Red Hawk is an open source tool that is used for information gathering and certain…