YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

What is JFScan? JFScan is a great enumeration tool  created by nullt3r written mainly in…

This tool provides automated setup of rogue access points by setting up a DHCP server…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Sitadel is a python based web application scanner. It’s flexible and has many different scanning…

Based on python, the Veil-Framework is one of the most popular tools for Anti-Virus evasion.…

CMSeek is a python tool that is used to detect Content Management System (CMS) within…

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…