Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…
Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…
Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…
CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…
Malware showcase is a Github repository that contains examples of malware usage and behavior, this…
Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…
Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…
The Operative Framework tool can be used within a red team/social engineering engagement to collect…
A2SV is an open source tool used for scanning SSL vulnerabilities in web applications. A2SV…
What is Azurite? This one’s a doozy folks. With the rapid growth of cloud infrastructure…
Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…
What is a Brakeman? in the 1800s a brakeman was a rail worker responsible for…
A critical flaw in Gitea’s official Docker image let anyone impersonate an admin with one …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A practitioner’s breakdown of the CSRF attack: how the forged request works, two documented exploits, …
Google has tightened its policies for application developers in an attempt to prevent malware. The …
The aftermath of the Cambridge Analytica scandal continues for Facebook even years later. The firm …
