Galileo is a free web application auditing framework that can perform various penetration testing tasks,…

Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

I found this one while doings some research on BadUSBs and thought it would be…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Cr3dOv3r is an open source tool that helps in finding credentials reuse attack for any…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

BLACKEYE is a LAN phishing tool that can clone more than 30 networks templates to…

Tplmap is a python tool that can find code injection and Server Side Templates Injection…

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Many times when you want to perform an exploitation to a windows target, you need…