Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

PhishX is a python tool that can capture user credentials using a spear phishing attack.…

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…

Empire is regarded as one of the most useful frameworks by many penetration testers. It…

Kalitorify is a shell based script for Kali Linux. It uses iptables and TOR to…

Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…

BadKarma is a GUI based network reconnaissance tool that can gather useful network information at…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…

What is Infection Monkey? Infection Monkey is an open-source breach and attack simulation tool for…

What is Legion Legion is a semi-automated easy to use network penetration testing framework that…

What is Azurite? This one’s a doozy folks. With the rapid growth of cloud infrastructure…