Latest Hacking News

Brakeman – A Code Security Auditing Tool for Ruby

What is a Brakeman? in the 1800s a brakeman was a rail worker responsible for…

WAScan – An Open Source Web Application Scanner

Today, we are going to talk about a powerful web application scanner named WAScan. WAScan…

Nmap Automator – a tool I used during OSCP for simple recon

Nmap Automator is a great tool for initial port scans of a given ip address.…

DumpsterDiver – The Tool For Finding Hardcoded Secrets

What is this dumpster diving tool you speak of? The creator of this tool has…

Knock – Open Source Subdomain Scanner Tool

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

Powershell-RAT | A Backdoor Tool to Extract Data via Gmail

Powershell-RAT is a Python and Powershell script tool that has been made to help a pen…

Harvest Subdomains with DNSHarvester

We’re back again with another banger from Dan Miessler so if you liked the post…

Bloodhound – A Tool For Exploring Active Directory Domain Security

Bloodhound is an open source application used for analyzing security of active directory domains. The…

Evilgrade – MITM Attack Framework to Exploit Machines

Evilgrade is a modular framework that takes over target machines by injecting fake updates in…

YAWAST – Open Source Web Application Information Gathering Toolkit

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Sitadel – An Open Source Tool for Finding Web Application Vulnerabilities

Sitadel is a python based web application scanner. It’s flexible and has many different scanning…

Wapiti – The Black Box Vulnerability Scanner for Web Applications

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

Brakeman – A Code Security Auditing Tool for Ruby

WAScan – An Open Source Web Application Scanner

Nmap Automator – a tool I used during OSCP for simple recon

DumpsterDiver – The Tool For Finding Hardcoded Secrets

Knock – Open Source Subdomain Scanner Tool

Powershell-RAT | A Backdoor Tool to Extract Data via Gmail

Harvest Subdomains with DNSHarvester

Bloodhound – A Tool For Exploring Active Directory Domain Security

Evilgrade – MITM Attack Framework to Exploit Machines

YAWAST – Open Source Web Application Information Gathering Toolkit

Sitadel – An Open Source Tool for Finding Web Application Vulnerabilities

Wapiti – The Black Box Vulnerability Scanner for Web Applications

Latest Cyber Security News | Network Security Hacking

Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

The Ill Bloom Vulnerability: How to Check If Your Wallet Is Exposed

Cursor’s Unpatched Zero-Day Lets a Fake git.exe Hijack Any Windows Developer

Shark Vacuum Vulnerability Lets Attackers Hijack Cameras Across an Entire AWS Region

wp2shell: WordPress Patches a Pre-Auth RCE That Needed No Plugins

Free Hacking Tools

BruteDum- A network attack bruteforce tool

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

A Review of DNS Enumeration Tool: DNSEnum

Harvest Subdomains with DNSHarvester

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

Rickdiculously – A CTF Designed for Rick And Morty Fans

Did you know ?

Kerberoasting Attack Explained Step by Step

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

What Is a Brute Force Attack? A Practical Defender’s Guide

Programming Languages for Cyber Security: What the Tools Actually Use

A High-risk vulnerability has been fixed in Android Oreo

Major Details of iPhone X got Leaked; “many surprises were leaked”