Today I have a tool that exploits insecure file shares and allows penetration testers to…

Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…

Httpx is a fast and multi-purpose HTTP toolkit that allows the user to run multiple…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …

Spiderfoot is an open source tool used for reconnaissance purpose. The tool is capable of…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…