Tools

Passive and active information gathering to map the attack surface

Network port scanning and service discovery

Discover hidden files, directories, and endpoints

Capture screenshots and visual evidence of web applications

Identify technologies, frameworks, and services used by targets

Find hidden and undocumented parameters in web applications

Fuzz web applications to find vulnerabilities through unexpected input

Exploit discovered vulnerabilities with specialized tools

Detect and verify subdomain takeover vulnerabilities

Automated vulnerability scanning and detection

Scan Content Management Systems for vulnerabilities

Password cracking, brute forcing, and hash analysis

Find exposed secrets, API keys, and credentials

Exploit exposed .git directories and version control data

Analyze and exploit JSON Web Tokens and JSON-based security issues

Cloud infrastructure enumeration and security auditing

Utility tools, proxies, and frameworks for various tasks

WiFi auditing, VPN security testing, and wireless protocol analysis

Digital forensics, memory analysis, disk imaging, and evidence collection

Internal network exploitation, Active Directory, pivoting, and lateral movement

Open Source Intelligence gathering, social engineering reconnaissance, and target profiling

Binary analysis, disassembly, debugging, and exploit development

Hardware hacking, RFID/NFC, JTAG debugging, and embedded device exploitation