Category Archives: Pentesting

Patator – Multi-purpose Brute-forcer

Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks.

CUPP – Common User Passwords Profiler

CUPP is a tool that may help to perform a legal penetration testing or forensic crime investigations.

Turbolist3r – Subdomain Enumeration Tool

Turbolist3r is a fork of the sublist3r subdomain discovery tool. In addition to the original OSINT capabilties of sublist3r.

Egressbuster – Checks Egress Filtering

EgressBuster is a way to test the effectiveness of egress filtering for an individual area.

CMSmap – CMS Security Scanner

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

RAWR – Rapid Assessment of Web Resources

RAWR is a python tool that is designed to make the process of web enumeration easy and efficient by providing pertinent information in usable formats.

Droopescan – CMS Plugin-based Security Scanner

Droopescan is a plugin-based scanner that aids security researchers in identifying issues with several CMS.