Latest Hacking News

W3af – Web Application Attack and Audit Framework

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

gau (GetAllUrls) Review – A Tool For Discovering URL’s

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

YAWAST – Open Source Web Application Information Gathering Toolkit

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

DumpsterDiver – The Tool For Finding Hardcoded Secrets

What is this dumpster diving tool you speak of? The creator of this tool has…

BinGoo- A Command Line Dorking Tool

What is BinGoo? Welcome to BinGoo, the all-in-one dorking tool written in bash. It uses…

BeRoot – A Post Exploitation Privilege Escalation Tool

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Minimalistic OffSec Scanner – A Powerful TCP and UDP Scanner

Here we have a compilation of tools by InfoSecMatter that is used for scanning open…

Sherlock – A Tool To Find Usernames Across Social Networks

With Sherlock you can search across a vast number of social platforms for a username.…

WiFiDuck BadUSB Tester

I found this one while doings some research on BadUSBs and thought it would be…

Red Hawk – Open Source Information Gathering and Vulnerability Scanning Tool

Red Hawk is an open source tool that is used for information gathering and certain…

Review of dnsx – a multi-purpose DNS toolkit

Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…

KillShot – An Information Gathering and Vulnerability Scanning Tool

KillShot is a penetration testing tool that can be used to gather useful information and…

W3af – Web Application Attack and Audit Framework

gau (GetAllUrls) Review – A Tool For Discovering URL’s

YAWAST – Open Source Web Application Information Gathering Toolkit

DumpsterDiver – The Tool For Finding Hardcoded Secrets

BinGoo- A Command Line Dorking Tool

BeRoot – A Post Exploitation Privilege Escalation Tool

Minimalistic OffSec Scanner – A Powerful TCP and UDP Scanner

Sherlock – A Tool To Find Usernames Across Social Networks

WiFiDuck BadUSB Tester

Red Hawk – Open Source Information Gathering and Vulnerability Scanning Tool

Review of dnsx – a multi-purpose DNS toolkit

KillShot – An Information Gathering and Vulnerability Scanning Tool

Latest Cyber Security News | Network Security Hacking

Two Joomla Extensions Hit by Zero-Day File Upload Attacks Before Patches Landed

11 Old Signed UEFI Shims Just Broke Secure Boot on Millions of PCs

How the GodDamn Ransomware Driver Bypasses Your EDR

Adobe ColdFusion Vulnerabilities Are a Design Failure, Not Bad Luck

Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896

Free Hacking Tools

BruteDum- A network attack bruteforce tool

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

A Review of DNS Enumeration Tool: DNSEnum

Harvest Subdomains with DNSHarvester

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

Rickdiculously – A CTF Designed for Rick And Morty Fans

Did you know ?

Kerberoasting Attack Explained Step by Step

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

What Is a Brute Force Attack? A Practical Defender’s Guide

Programming Languages for Cyber Security: What the Tools Actually Use

Chronicle, A New Cyber Security Company from Google X

Japan cooperating with NATO to Improve Cyber Defense Infrastructure