Evilginx is framework that is able to steal user credentials through a man in the…
East is a Python based security framework toolkit. It acts as a HTTP server and…
Vega is a GUID based open source tool used for testing the security of web…
I found this one while doings some research on BadUSBs and thought it would be…
Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…
YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…
Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…
Final Recon is a useful tool for gathering data about a target from open source…
Many times when you want to perform an exploitation to a windows target, you need…
Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…
Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…
The Operative Framework tool can be used within a red team/social engineering engagement to collect…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
A serious security vulnerability affected the WordPress plugin Security Shield, which could allow arbitrary file …
Heads up, Mastodon admins! A critical security vulnerability riddled Mastodon, allowing account takeover by an …
