This is a Chrome Extension Exploitation Framework – think BeEF for Chrome extensions. Whenever you encounter a XSS vulnerability in Chrome extension, ChEF ...

Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather ...

Manuka is an Open-source intelligence (OSINT) honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates ...

Slack is a great tool for easy and convenient team collaboration and growing rapidly in popularity with home office becoming more widespread. As ...

explo is a simple tool to describe web security issues in a human and machine readable format. By defining a request/condition workflow, explo ...

SQLI-LABS is a platform to learn SQLI Following labs are covered for GET and POST scenarios: Error Based Injections (Union Select) String Intiger ...

  Important Bolt is in beta phase of development which means there can be bugs. Any production use of this tool discouraged. Pull ...

CSRFER is a tool to generate csrf payloads, based on vulnerable requests. It parses supplied requests to generate either a form or a ...

IoTMap is a tool that models IoT networks using one or multiple protocols simultaneously. This is work in progress, as a part of ...

Menu Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation Contributors Install & Update ...