The Operative Framework tool can be used within a red team/social engineering engagement to collect…

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Red Hawk is an open source tool that is used for information gathering and certain…

Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…

Spiderfoot is an open-source tool used for reconnaissance. It is capable of gathering open-source information…

Dirhunt is a python tool that can quickly search directories on target domains to find…

Yuki Chan is an open source tool that automates some of the information gathering and…

SecLists is a pentesting tool used by security professionals around the globe, it contains various…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…