Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Fluxion is a wifi security analysis tool that can simulate wifi attacks using the MITM…

ARPwner is a GUI based tool that can perform tasks like ARP and DNS spoofing.…

MassBleed is an open source tool used for scanning SSL vulnerabilities in web applications. The…

What is this dumpster diving tool you speak of? The creator of this tool has…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…