• Reconnaissance: Information gathering tools.

• Google Hacking - This module contains tools (Google Dorks) that you can use to find the vulnerable sites. There are six different Google Dorks in it:

• PhpMyAdmin - This google dork bypasses the admin username and password and takes you directly to information schema tables of vulnerable websites.

• PhpConfig - This one will show you a Google search result containing vulnerable sites that may allow you to include malicious files to a web application (php remote file include vulnerability).

• SQL Injection - This Google dork shows sites vulnerable to SQL injection attacks.

• MySQL Server - This shows a search result that may help you to get sensitive information from the target MySQL server.

• Login Portals - It shows a Google search result that contains simple SAMLphp login pages.

• Passwords - This google dork allows you to get files containing SQL instructions where the administrator set a password for a database user.

• WhoIs Lookup: This tool allows you to look up information on domain names or IPs. This includes contact information as well as some technical information such as the domain’s name servers (DNS) used for service, and certain Status information such as the site status and the server type.

• Scanning: Tools for scanning the target.

• Ping - It allows you to test the reachability of a host and to measure the round-trip time for messages sent from the originating host to a destination device.

• Traceroute - It allows you to identify the intermediate devices and the connection speed.

• Mx Record - It allows you to get information about the target's mail server which is responsible for accepting email messages on behalf of a recipient's domain.

• DNS Dig -  It can be used to find Information about the target website's DNS server.

• Exploits: It is not ready yet and I don't think it ever will be. Because it was like this since 2013.

• Security Feed: It shows latest security news.