Nmap Automator – a tool I used during OSCP for simple recon

Nmap Automator is a great tool for initial port scans of a given ip address.…

Read more

FinalRecon – An All In One OSINT Tool for Web Reconnaissance

Final Recon is a useful tool for gathering data about a target from open source…

Read more

BLACKEYE – Open Source LAN Phishing Tool for Penetration Testing

BLACKEYE is a LAN phishing tool that can clone more than 30 networks templates to…

Read more

DSXS | An open source, simple and effective XSS scanner that can...

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Read more

Ffuf (Fuzz Faster U Fool) – An Open Source Fast Web Fuzzing...

Ffuf – Fuzz Faster U Fool is a great tool used for fuzzing. It has…

Read more

6 OSINT Tools That Make a Pentester’s Life Easier

So you have been tasked with performing a penetration test of the internet-facing systems of…

Read more

BoomER | An Open Source Post-Exploitation Tool To Exploit Local Vulnerabilities

BoomER is a Command-line interface python open-source framework fully developed in Python 3.X for post-exploitation…

Read more

Turbolist3r – An Automated Subdomain Scanning Tool

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Read more

DumpsterDiver – The Tool For Finding Hardcoded Secrets

What is this dumpster diving tool you speak of? The creator of this tool has…

Read more

WAScan – An Open Source Web Application Scanner

Today, we are going to talk about a powerful web application scanner named WAScan. WAScan…

Read more

NoSQLMap – Open Source Audit and Attack NoSQL Databases

NoSQLMap is an open source python based tool, designed to audit and automate injection attacks…

Read more

Just Scan It with JFScan

What is JFScan? JFScan is a great enumeration tool  created by nullt3r written mainly in…

Read more

Latest Cyber Security News | Network Security Hacking

Two Joomla Extensions Hit by Zero-Day File Upload Attacks Before Patches Landed

by Rebecca Sutton

CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …

by Rebecca Sutton

11 Old Signed UEFI Shims Just Broke Secure Boot on Millions of PCs

by Rebecca Sutton

How the GodDamn Ransomware Driver Bypasses Your EDR

by Rebecca Sutton

Adobe ColdFusion Vulnerabilities Are a Design Failure, Not Bad Luck

by Rebecca Sutton

Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896

by Rebecca Sutton

Free Hacking Tools

BruteDum- A network attack bruteforce tool

by Tyler Loftus

I found a doozie here ladies and gentlemen, with a little python script called BruteDum.  …

by Tyler Loftus

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

by Tyler Loftus

A Review of DNS Enumeration Tool: DNSEnum

by Tyler Loftus

Harvest Subdomains with DNSHarvester

by Tyler Loftus

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …

by Unallocated Author

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Rickdiculously – A CTF Designed for Rick And Morty Fans

by Unallocated Author

Did you know ?

Kerberoasting Attack Explained Step by Step

by Rebecca Sutton

A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …

by Rebecca Sutton

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

by Rebecca Sutton

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

by Rebecca Sutton

What Is a Brute Force Attack? A Practical Defender’s Guide

by Rebecca Sutton

Programming Languages for Cyber Security: What the Tools Actually Use

by Rebecca Sutton

Latest Hacking News