YAWAST – Open Source Web Application Information Gathering Toolkit

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Read more

WhatWeb – A Very Handy Open Source Web Scanner

Definition Whatweb is web scanner written in Ruby to identify and recognise technologies used by…

Read more

Ffuf (Fuzz Faster U Fool) – An Open Source Fast Web Fuzzing...

Ffuf – Fuzz Faster U Fool is a great tool used for fuzzing. It has…

Read more

Morpheus –TCP/UDP Manipulation Framework

Morpheus is an open source framework that can launch multiple attacks on the network using…

Read more

BitB- Capture credentials with a fake browser login

What is a Browser in the Browser attack What’s up nerds! Mr.D0x has yet another…

Read more

Azurite – An Azure AD Enumeration Tool

What is Azurite? This one’s a doozy folks. With the rapid growth of cloud infrastructure…

Read more

Eyewitness – Open Source Target Visualization and Recon Tool

Got a huge list of targets that you’d like to enumerate but can’t really visit…

Read more

XSStrike – XSS Detection and Exploitation Suite

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

Read more

Blackeye – A Free Phishing Tool

So what is this phishing tool all about? Blackeye is tool scripted in shell to…

Read more

CMSeeK | An Open Source Content Management System Detection and Exploitation Tool

CMSeek is an open-source tool that analyzes the regex of websites in order to detect…

Read more

Spiderfoot – Open Source Intelligence and Information Gathering Tool

Spiderfoot is an open source tool used for reconnaissance purpose. The tool is capable of…

Read more

Mip22- A Phishing Tool for Linux and Android

What is Mip22? Mip22 is a modern and advanced cyber security program for use with…

Read more

Latest Cyber Security News | Network Security Hacking

Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896

by Rebecca Sutton

A critical flaw in Gitea’s official Docker image let anyone impersonate an admin with one …

by Rebecca Sutton

Inside Android’s New Lockscreen Rate-Limiting Rules

by Rebecca Sutton

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

by CyberNewswire

“Bad Epoll” Linux Kernel Bug Lets Any User Grab Root

by Rebecca Sutton

Google and FBI Dismantle NetNut Residential Proxy Botnet

by Rebecca Sutton

Free Hacking Tools

BruteDum- A network attack bruteforce tool

by Tyler Loftus

I found a doozie here ladies and gentlemen, with a little python script called BruteDum.  …

by Tyler Loftus

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

by Tyler Loftus

A Review of DNS Enumeration Tool: DNSEnum

by Tyler Loftus

Harvest Subdomains with DNSHarvester

by Tyler Loftus

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …

by Unallocated Author

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Rickdiculously – A CTF Designed for Rick And Morty Fans

by Unallocated Author

Did you know ?

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

by Rebecca Sutton

A practitioner’s breakdown of the CSRF attack: how the forged request works, two documented exploits, …

by Rebecca Sutton

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

by Rebecca Sutton

What Is a Brute Force Attack? A Practical Defender’s Guide

by Rebecca Sutton

Programming Languages for Cyber Security: What the Tools Actually Use

by Rebecca Sutton

What Is a Buffer Overflow? The Bug That Keeps Driving Critical CVEs

by Rebecca Sutton

Latest Hacking News