Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…
PhishX is a python tool that can capture user credentials using a spear phishing attack.…
Evilginx is framework that is able to steal user credentials through a man in the…
What is Legion Legion is a semi-automated easy to use network penetration testing framework that…
MassExploitConsole is a python based easy-to-use cli tool for executing exploits. It has a collection…
Today, we are going to talk about a powerful web application scanner named WAScan. WAScan…
BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…
Galileo is a free web application auditing framework that can perform various penetration testing tasks,…
Commix is a command injection exploitation tool used for testing command injection vulnerabilities in web…
XAttacker is a perl tool capable of scanning and auto-exploiting vulnerabilities in web applications. By…
Phishing is a classic favorite attack of hackers. Not only that it provides easy access…
SecLists is a pentesting tool used by security professionals around the globe, it contains various…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
Microsoft is dropping various features and functionalities from its new build. In preparation for the …
The toolkit has lasted about since 2010 yet has dropped on tough times. One of Google’s …
