Tool of the day

MassBleed is a SSL Vulnerability Scanner that checks for TLS/SSL related vulnerabilities like Drown, POODLE, Heart Bleed, Winshock.

Dex2Jar is an instrument whose primary point is to convert .dex files into jar and smali files. The Dex2jar is mainly used for reverse engineering Android applications.

FridaLoader is an Android app to setup frida and launch in quick way.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) Static ...

Legion is an open source, easy-to-use, super-extensible and semi-automated ...

Dirsearch is Tool that performs bruteforce attack of sensitive directories and files that are found on the websites.

This tool can scan websites with open .git repositories for Bug Hunting...

RVuln:-- A multi-threaded-vulnerability-scanner written in Rust. Automated #Web Vulnerability Scanner.

Insider tool is secure code reviewer, which exclusively focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code.

Shcheck detects which security headers are enabled on certain websites. It just check headers and print a report about which are enabled and which not.

Security Tool For Reconnaissance And Information Gathering On A Website

W9scan is an excellent Plug-in type web vulnerability scanner that scan the code with the 1200+ built-in plugins...

Final Recon follows a modular structure so in future new modules can be added with ease.

Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations.

SecretFinder is a python script to discover sensitive data like api keys, access token, authorizations, jwt,..etc in JavaScript(JS) files. It verifies the files with large regular expression.

Blazy is a modern login page bruteforcer. It has  Easy target selections  Smart form and error detection.

RapidScan is a python based scanning tool used for analyzing vulnerabilities ...

Turbolist3r is a fork of the sublist3r subdomain discovery tool. In addition to the original OSINT capabilties of sublist3r, turbolist3r ...

Tulpar is an open source penetration testing tool that can find web application vulnerabilities.

CipherScan discovers the SSL ciphersuites supported by the target.

A python script designed to check if the website is vulnerable of clickjacking and creates a poc.