CMSmap – An Open Source CMS Scanner

Cmsmap is a python based CMS scanner for automating the process of vulnerability assessment in…

Read more

Nmap Automator – a tool I used during OSCP for simple recon

Nmap Automator is a great tool for initial port scans of a given ip address.…

Read more

W3af – Web Application Attack and Audit Framework

W3af is a GUI based framework that helps in auditing and identifying vulnerabilities in web…

Read more

TIDoS – Open Source Reconnaissance and Web Application Audit Framework

TIDoS framework is a python based toolkit that performs a comprehensive audit of the web…

Read more

Joomscan – Open Source Joomla Vulnerability Scanner

Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…

Read more

Uniscan – Web Application Penetration Testing Tool

Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…

Read more

KillShot – An Information Gathering and Vulnerability Scanning Tool

KillShot is a penetration testing tool that can be used to gather useful information and…

Read more

Knock – Open Source Subdomain Scanner Tool

Knock is a python based tool for enumerating subdomains on a targeted domain. You can…

Read more

Bloodhound – A Tool For Exploring Active Directory Domain Security

Bloodhound is an open source application used for analyzing security of active directory domains.  The…

Read more

DSXS | An open source, simple and effective XSS scanner that can...

Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…

Read more

Brakeman – A Code Security Auditing Tool for Ruby

What is a Brakeman? in the 1800s a brakeman was a rail worker responsible for…

Read more

Aquatone | An Open Source Domain Flyover Tool

Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…

Read more

Latest Cyber Security News | Network Security Hacking

Inside Android’s New Lockscreen Rate-Limiting Rules

by Rebecca Sutton

Google has replaced Android’s 1,800-guess lockscreen limit with a 20-attempt hard cap. Here is how …

by Rebecca Sutton

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

by CyberNewswire

“Bad Epoll” Linux Kernel Bug Lets Any User Grab Root

by Rebecca Sutton

Google and FBI Dismantle NetNut Residential Proxy Botnet

by Rebecca Sutton

Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox

by Rebecca Sutton

Free Hacking Tools

BruteDum- A network attack bruteforce tool

by Tyler Loftus

I found a doozie here ladies and gentlemen, with a little python script called BruteDum.  …

by Tyler Loftus

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

by Tyler Loftus

A Review of DNS Enumeration Tool: DNSEnum

by Tyler Loftus

Harvest Subdomains with DNSHarvester

by Tyler Loftus

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …

by Unallocated Author

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Rickdiculously – A CTF Designed for Rick And Morty Fans

by Unallocated Author

Did you know ?

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

by Rebecca Sutton

A practitioner’s breakdown of the CSRF attack: how the forged request works, two documented exploits, …

by Rebecca Sutton

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

by Rebecca Sutton

What Is a Brute Force Attack? A Practical Defender’s Guide

by Rebecca Sutton

Programming Languages for Cyber Security: What the Tools Actually Use

by Rebecca Sutton

What Is a Buffer Overflow? The Bug That Keeps Driving Critical CVEs

by Rebecca Sutton

Latest Hacking News