cSploit is now considered EOL and is not being updated by the developers. Current version…
XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …
Nmap Automator is a great tool for initial port scans of a given ip address.…
Kalitorify is a shell based script for Kali Linux. It uses iptables and TOR to…
PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…
Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…
Reconnaissance is one of the first steps to conduct within a pen test engagement. During…
I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…
Yuki Chan is an open source tool that automates some of the information gathering and…
Tmux is a terminal multiplexer: which in lamen terms means it is able to create…
Today, we are going to talk about a powerful web application scanner named WAScan. WAScan…
Wifi Pumpkin is a security audit framework used to test the security of wifi against…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
Twitter’s direct message feature appears to be an easy and secure way to communicate with …
Pluck is a Boot2Root CTF Challenge and is available at Vulnhub. This challenge is for …
