YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…
Reconnaissance is one of the first steps to conduct within a pen test engagement. During…
PhishX is a python tool that can capture user credentials using a spear phishing attack.…
ARPwner is a GUI based tool that can perform tasks like ARP and DNS spoofing.…
Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…
Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…
We’re back again with another banger from Dan Miessler so if you liked the post…
Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…
The Operative Framework tool can be used within a red team/social engineering engagement to collect…
So you have been tasked with performing a penetration test of the internet-facing systems of…
What is Legion Legion is a semi-automated easy to use network penetration testing framework that…
DumpsterFire is an open-source tool made by blue team member to edit create and control…
Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor’s command sandbox …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
Security tooling is not written in a single language. Python powers most automation. C sits …
Apple recently patched two vulnerabilities actively exploited in the wild to target iPhones. The researchers …
Heads up, Atlas VPN users! A serious zero-day flaw affects the Atlas VPN Linux client, …
