The Evil Access Point (AP) attack has been around for a long time. There are…
Evilginx is framework that is able to steal user credentials through a man in the…
XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …
The fsociety hacking tools pack is a penetration testing framework that consists of many of…
AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…
Today I have a tool that exploits insecure file shares and allows penetration testers to…
TIDoS framework is a python based toolkit that performs a comprehensive audit of the web…
Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a…
Security company NCC Group have released an open source tool for penetration testing named Singularity,…
Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…
BLACKEYE is a LAN phishing tool that can clone more than 30 networks templates to…
Ffuf – Fuzz Faster U Fool is a great tool used for fuzzing. It has…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
Researchers discovered numerous vulnerabilities in the credential manager “Passwordstate” that could leave stored passwords exposed. …
Google has finally rolled out end-to-end encryption for all existing and new Gmail users. This …
