What is a Browser in the Browser attack What’s up nerds! Mr.D0x has yet another…
Evilginx is framework that is able to steal user credentials through a man in the…
Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…
I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…
Habu is an open source penetration testing toolkit that can perform various penetration testing tasks…
Evilgrade is a modular framework that takes over target machines by injecting fake updates in…
What is msImpersonate? What’s up nerds! Captain AMayorica hooked us up again with another Microsoft…
Social Mapper is an open source tool that searches for profile information from social media…
Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…
Reconnaissance is one of the first steps to conduct within a pen test engagement. During…
Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a…
Nmap Automator is a great tool for initial port scans of a given ip address.…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
Recently, a researcher discovered a Starbucks API key exposed in a public GitHub repo. Had …
Heads up Ruckus routers users! A researcher has discovered numerous vulnerabilities in Ruckus router firmware. …
