Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…

Sqlmap is an open source tool used to test the SQL injection vulnerabilities within web…

Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a…

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

Spiderfoot is an open source tool used for reconnaissance purpose. The tool is capable of…

TIDoS framework is a python based toolkit that performs a comprehensive audit of the web…

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Here we have a compilation of tools by InfoSecMatter that is used for scanning open…