Social Mapper is an open source tool that searches for profile information from social media…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…

PhishX is a python tool that can capture user credentials using a spear phishing attack.…

CMSeek is a python tool that is used to detect Content Management System (CMS) within…

cSploit is now considered EOL and is not being updated by the developers. Current version…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Cmsmap is a python based CMS scanner for automating the process of vulnerability assessment in…

The Operative Framework tool can be used within a red team/social engineering engagement to collect…

Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…

PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…

XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…

Reconnaissance is one of the first steps to conduct within a pen test engagement. During…