Morpheus is an open source framework that can launch multiple attacks on the network using applications, such as ettercap, msgsnarf, tcpkill, and...
XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. The tool is equipped with a powerful...
Leviathan is an open source toolkit that can be used for auditing networks and web applications. The types of audits that can...
CMSeek is a python tool that is used to detect Content Management System (CMS) within a target website, it can extract useful information...
Evilgrade is a modular framework that takes over target machines by injecting fake updates in poorly updated systems using a MITM attack...
CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative rights and mapping active directory networks. Active...
Zeus scanner is an open source tool used for reconnaissance and vulnerability assessments of web applications. The tool is equipped with a...
Vega is a GUID based open source tool used for testing the security of web applications. The tool can be used to...
Researchers from universities in Sweden and the UK have discovered a new method to turn the built-in speaker and the microphone from...
Droopescan is a python based scanner that is used to scan the web applications that utilise Drupal, SilverStripe, and WordPress. The types...
ARPwner is a GUI based tool that can perform tasks like ARP and DNS spoofing. Through ARP and DNS spoofing, the attackers...
TIDoS framework is a python based toolkit that performs a comprehensive audit of the web applications. The toolkit is packed with a...
Raccoon is an offensive security tool known for reconnaissance and information gathering. The tool can extract useful information about the target host,...
Tplmap is a python tool that can find code injection and Server Side Templates Injection (SSTI) vulnerabilities by using sandbox escape techniques....
W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web applications. The tool is loaded with a...
Net Creds is a free tool that sniffs passwords and hashes from a network interface. The tool launches a MITM attack to...
Security company NCC Group have released an open source tool for penetration testing named Singularity, the tool allows security researchers to test...
The Operative Framework tool can be used within a red team/social engineering engagement to collect information regarding websites and enterprises. The tool...
RapidScan is a python based scanning tool used for analyzing vulnerabilities in web applications. The tool is equipped with scanning utilities, such...
XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By providing a target website to the tool,...
Fluxion is a wifi security analysis tool that can simulate wifi attacks using the MITM technique. The tool can create rogue access...