BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

4CAN V2 is a Raspberry Pi project created by the Cisco team in order to…

Ffuf – Fuzz Faster U Fool is a great tool used for fuzzing. It has…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

Zarp is a powerful tool used for scanning and attacking networks. The tool is capable…

Pythem is a python framework used for performing various security tests on networks and web…

I came across this python script that can perform SSH login bruteforce attacks and decided…

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

We’re back again with another banger from Dan Miessler so if you liked the post…