Latest Hacking News

Wapiti – The Black Box Vulnerability Scanner for Web Applications

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

Net Creds – Open Source Tool to Sniff Network Passwords and Hashes

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Lnkbomb- Exploit Insecure File Shares

Today I have a tool that exploits insecure file shares and allows penetration testers to…

CrackMapExec –Post Exploitation tool for Active Directory Networks

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…

BeRoot – A Post Exploitation Privilege Escalation Tool

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Nmap Automator – a tool I used during OSCP for simple recon

Nmap Automator is a great tool for initial port scans of a given ip address.…

BadKarma – Network Reconnaissance Tool with Advanced Features

BadKarma is a GUI based network reconnaissance tool that can gather useful network information at…

Avet – Open Source Tool for Anti-Virus Evasion

Many times when you want to perform an exploitation to a windows target, you need…

Pythem – Web and Network Security Audit Framework

Pythem is a python framework used for performing various security tests on networks and web…

Minimalistic OffSec Scanner – A Powerful TCP and UDP Scanner

Here we have a compilation of tools by InfoSecMatter that is used for scanning open…

InfoG v1.0 – An Open Source Information Gathering Tool

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

TIDoS – Open Source Reconnaissance and Web Application Audit Framework

TIDoS framework is a python based toolkit that performs a comprehensive audit of the web…

Wapiti – The Black Box Vulnerability Scanner for Web Applications

Net Creds – Open Source Tool to Sniff Network Passwords and Hashes

Lnkbomb- Exploit Insecure File Shares

CrackMapExec –Post Exploitation tool for Active Directory Networks

BeRoot – A Post Exploitation Privilege Escalation Tool

Nmap Automator – a tool I used during OSCP for simple recon

BadKarma – Network Reconnaissance Tool with Advanced Features

Avet – Open Source Tool for Anti-Virus Evasion

Pythem – Web and Network Security Audit Framework

Minimalistic OffSec Scanner – A Powerful TCP and UDP Scanner

InfoG v1.0 – An Open Source Information Gathering Tool

TIDoS – Open Source Reconnaissance and Web Application Audit Framework

Latest Cyber Security News | Network Security Hacking

The ASLR Caveat on NGINX’s Critical HTTP/3 Flaw Changes Nothing About Urgency

CVE-2026-48907: How the Joomla JCE Exploit Works and What to Do About It

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It

How CVE-2026-20253 Turns Splunk’s PostgreSQL Sidecar Into an Open Door

Free Hacking Tools

BruteDum- A network attack bruteforce tool

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

A Review of DNS Enumeration Tool: DNSEnum

Harvest Subdomains with DNSHarvester

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

Rickdiculously – A CTF Designed for Rick And Morty Fans

Did you know ?

Privilege Escalation: The Step Between Foothold and Full Compromise

Nmap for Beginners: Understanding Scans Before You Run Them

Reverse Shell Explained: Setup, Attack Chain, and Detection

How Ransomware Works: Encryption Is the Least of Your Problems

Why Credential and Session Exposure Monitoring Should Be a Baseline Security Practice

Google launches .app domain with HTTPS

LTE Flaw Lets Hackers Hijack Users Browsing Session