XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

4CAN V2 is a Raspberry Pi project created by the Cisco team in order to…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Empire is regarded as one of the most useful frameworks by many penetration testers. It…

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…

TIDoS framework is a python based toolkit that performs a comprehensive audit of the web…

NoSQLMap is an open source python based tool, designed to audit and automate injection attacks…

Ffuf – Fuzz Faster U Fool is a great tool used for fuzzing. It has…

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…

Today I have a tool that exploits insecure file shares and allows penetration testers to…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…