Latest Hacking News

CMSeek – CMS Detection and Information Gathering

CMSeek is a python tool that is used to detect Content Management System (CMS) within…

Turbolist3r – An Automated Subdomain Scanning Tool

Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…

Osueta – A Script for OpenSSH Server Side Attacks

So what is this Osueta script all about? Osueta is a powerful python script used…

Brakeman – A Code Security Auditing Tool for Ruby

What is a Brakeman? in the 1800s a brakeman was a rail worker responsible for…

Sitadel – An Open Source Tool for Finding Web Application Vulnerabilities

Sitadel is a python based web application scanner. It’s flexible and has many different scanning…

PuTTY SSH Bruteforce Login Script

I came across this python script that can perform SSH login bruteforce attacks and decided…

Modlishka – An Open Source Phishing Tool With 2FA Authentication

Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…

Winpayloads – An Open Source Tool for Generating Windows Payloads

Winpayloads is a python based tool which combines some of the Powershell Empire features along…

TheFatRat – A Convenient Exploitation Tool

TheFatRat is an easy to use tool which helps in generating backdoors, system exploitation, post…

Legion By GoVanguard- An Automated Reconnaissance Tool

What is Legion Legion is a semi-automated easy to use network penetration testing framework that…

TIDoS – Open Source Reconnaissance and Web Application Audit Framework

TIDoS framework is a python based toolkit that performs a comprehensive audit of the web…

WiFiDuck BadUSB Tester

I found this one while doings some research on BadUSBs and thought it would be…

CMSeek – CMS Detection and Information Gathering

Turbolist3r – An Automated Subdomain Scanning Tool

Osueta – A Script for OpenSSH Server Side Attacks

Brakeman – A Code Security Auditing Tool for Ruby

Sitadel – An Open Source Tool for Finding Web Application Vulnerabilities

PuTTY SSH Bruteforce Login Script

Modlishka – An Open Source Phishing Tool With 2FA Authentication

Winpayloads – An Open Source Tool for Generating Windows Payloads

TheFatRat – A Convenient Exploitation Tool

Legion By GoVanguard- An Automated Reconnaissance Tool

TIDoS – Open Source Reconnaissance and Web Application Audit Framework

WiFiDuck BadUSB Tester

Latest Cyber Security News | Network Security Hacking

The ASLR Caveat on NGINX’s Critical HTTP/3 Flaw Changes Nothing About Urgency

CVE-2026-48907: How the Joomla JCE Exploit Works and What to Do About It

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It

How CVE-2026-20253 Turns Splunk’s PostgreSQL Sidecar Into an Open Door

Free Hacking Tools

BruteDum- A network attack bruteforce tool

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

A Review of DNS Enumeration Tool: DNSEnum

Harvest Subdomains with DNSHarvester

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

Rickdiculously – A CTF Designed for Rick And Morty Fans

Did you know ?

Privilege Escalation: The Step Between Foothold and Full Compromise

Nmap for Beginners: Understanding Scans Before You Run Them

Reverse Shell Explained: Setup, Attack Chain, and Detection

How Ransomware Works: Encryption Is the Least of Your Problems

Why Credential and Session Exposure Monitoring Should Be a Baseline Security Practice

Pipidae – the latest malware to take over the Mac ecosystem

Google Workspace Design Flaw Allows Unauthorized Access