HBSQLI: Automated Tester For Header-Based Blind SQL Injection HBSQLI is an automated command-line tool for performing Header...
WebApp PenTest
GCPGoat: A Damn Vulnerable GCP Infrastructure Compromising an organization’s cloud infrastructure is like sitting on a gold...
DeepSecrets – a better tool for secret scanning Yet another tool – why? Existing tools don’t really...
What is Hiphp? The HIPHP BackDoor is an open-source tool that allows for remote control of websites...
Bug Bounty Reconnaissance Framework The Bug Bounty Reconnaissance Framework (BBRF) can be used to coordinate your reconnaissance...
IaC Scan Runner The IaC Scanner is an inspection service that aims to scan IaC (Infrastructure as Code)...
Goblob Goblob is a lightweight and fast enumeration tool designed to aid in the discovery of sensitive...
Afuzz – An automated web path fuzzing tool Afuzz is an automated web path fuzzing tool for...
Mantra The tool in question was created in Go and its main objective is to search for...
SysReptor – Pentest Reporting Easy As Pie SysReptor is a fully customisable, offensive security reporting solution designed...
jsFinder jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files...
cloudtoolkit Cloud Penetration Testing Toolkit Capability overview Providers Payload Supported Alibaba Cloud backdoor-user: Backdoored user can be...
Burp DOM Scanner It’s a Burp Suite extension to allow for recursive crawling and scanning of Single...
XSS Exploitation Tool It is a penetration testing tool that focuses on the exploitation of Cross-Site Scripting...
LinkedInDumper Python 3 script to dump company employees from LinkedIn Voyager API. The results contain firstname, lastname,...