Latest Hacking News

4CAN V2 | A Raspberry Pi Project To Help Find Vulnerabilities in...

4CAN V2 is a Raspberry Pi project created by the Cisco team in order to…

Subfinder – A Subdomain Discovery Tool

So what is this subfinder tool all about? Subfinder is a subdomain discovery tool that…

Evilginx – The Free Advanced Phishing Attack Framework

Evilginx is framework that is able to steal user credentials through a man in the…

Powershell-RAT | A Backdoor Tool to Extract Data via Gmail

Powershell-RAT is a Python and Powershell script tool that has been made to help a pen…

Bloodhound – A Tool For Exploring Active Directory Domain Security

Bloodhound is an open source application used for analyzing security of active directory domains. The…

Nmap Automator – a tool I used during OSCP for simple recon

Nmap Automator is a great tool for initial port scans of a given ip address.…

W3af – Web Application Attack and Audit Framework

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Empire – Open Source Post-Exploitation Agent Tool

Empire is regarded as one of the most useful frameworks by many penetration testers. It…

Minimalistic OffSec Scanner – A Powerful TCP and UDP Scanner

Here we have a compilation of tools by InfoSecMatter that is used for scanning open…

Xerosploit – Open Source Toolkit For Man In The Middle Attacks

Xerosploit is a python-based toolkit for creating efficient Man In The Middle attacks which combines…

Dalfox – An Automated XSS Finder

Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser.…

BitB- Capture credentials with a fake browser login

What is a Browser in the Browser attack What’s up nerds! Mr.D0x has yet another…

4CAN V2 | A Raspberry Pi Project To Help Find Vulnerabilities in...

Subfinder – A Subdomain Discovery Tool

Evilginx – The Free Advanced Phishing Attack Framework

Powershell-RAT | A Backdoor Tool to Extract Data via Gmail

Bloodhound – A Tool For Exploring Active Directory Domain Security

Nmap Automator – a tool I used during OSCP for simple recon

W3af – Web Application Attack and Audit Framework

Empire – Open Source Post-Exploitation Agent Tool

Minimalistic OffSec Scanner – A Powerful TCP and UDP Scanner

Xerosploit – Open Source Toolkit For Man In The Middle Attacks

Dalfox – An Automated XSS Finder

BitB- Capture credentials with a fake browser login

Latest Cyber Security News | Network Security Hacking

Two Joomla Extensions Hit by Zero-Day File Upload Attacks Before Patches Landed

11 Old Signed UEFI Shims Just Broke Secure Boot on Millions of PCs

How the GodDamn Ransomware Driver Bypasses Your EDR

Adobe ColdFusion Vulnerabilities Are a Design Failure, Not Bad Luck

Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896

Free Hacking Tools

BruteDum- A network attack bruteforce tool

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

A Review of DNS Enumeration Tool: DNSEnum

Harvest Subdomains with DNSHarvester

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

Rickdiculously – A CTF Designed for Rick And Morty Fans

Did you know ?

Kerberoasting Attack Explained Step by Step

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

What Is a Brute Force Attack? A Practical Defender’s Guide

Programming Languages for Cyber Security: What the Tools Actually Use

Zero-Day in IIS 6.0 Affects More than 8 Million Websites

VMware Patches Flaws Disclosed at Pwn2Own