Phishing 101 using SocialFish Tool

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…

Read more

Lnkbomb- Exploit Insecure File Shares

Today I have a tool that exploits insecure file shares and allows penetration testers to…

Read more

EaST – Open Source Exploits and Security Tools Framework

East is a Python based security framework toolkit. It acts as a HTTP server and…

Read more

Salsa-tools | A Collaboration of Tools For a Reverse Shell on Steroids

Salsa-tools is a collection of three tools  programmed with C# used to take over a…

Read more

Dalfox – An Automated XSS Finder

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

Read more

BLACKEYE – Open Source LAN Phishing Tool for Penetration Testing

BLACKEYE is a LAN phishing tool that can clone more than 30 networks templates to…

Read more

CrackMapExec –Post Exploitation tool for Active Directory Networks

CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…

Read more

Tulpar – An Open Source Web Application Vulnerability Scanner

Tulpar is an open source penetration testing tool that can find web application vulnerabilities such…

Read more

Net Creds – Open Source Tool to Sniff Network Passwords and Hashes

Net Creds is a free tool that sniffs passwords and hashes from a network interface.…

Read more

InfoG v1.0 – An Open Source Information Gathering Tool

Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…

Read more

webscreenshot.py | A Simple script that aids in testing large websites

Web Screenshot – webscreenshot.py is a great tool which comes in handy when a penetration…

Read more

Photon – A Very Handy Open Source OSINT Tool

Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a…

Read more

Latest Cyber Security News | Network Security Hacking

Inside Android’s New Lockscreen Rate-Limiting Rules

by Rebecca Sutton

Google has replaced Android’s 1,800-guess lockscreen limit with a 20-attempt hard cap. Here is how …

by Rebecca Sutton

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

by CyberNewswire

“Bad Epoll” Linux Kernel Bug Lets Any User Grab Root

by Rebecca Sutton

Google and FBI Dismantle NetNut Residential Proxy Botnet

by Rebecca Sutton

Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox

by Rebecca Sutton

Free Hacking Tools

BruteDum- A network attack bruteforce tool

by Tyler Loftus

I found a doozie here ladies and gentlemen, with a little python script called BruteDum.  …

by Tyler Loftus

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

by Tyler Loftus

A Review of DNS Enumeration Tool: DNSEnum

by Tyler Loftus

Harvest Subdomains with DNSHarvester

by Tyler Loftus

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …

by Unallocated Author

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Rickdiculously – A CTF Designed for Rick And Morty Fans

by Unallocated Author

Did you know ?

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

by Rebecca Sutton

A practitioner’s breakdown of the CSRF attack: how the forged request works, two documented exploits, …

by Rebecca Sutton

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

by Rebecca Sutton

What Is a Brute Force Attack? A Practical Defender’s Guide

by Rebecca Sutton

Programming Languages for Cyber Security: What the Tools Actually Use

by Rebecca Sutton

What Is a Buffer Overflow? The Bug That Keeps Driving Critical CVEs

by Rebecca Sutton

Latest Hacking News