Golismero – Web Application Vulnerability Scanner

So what is this tool all about? Golismero is an open source framework, used for…

Read more

Zarp – A Free Network Attack Framework

Zarp is a powerful tool used for scanning and attacking networks. The tool is capable…

Read more

YAWAST – Open Source Web Application Information Gathering Toolkit

YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

Read more

Brakeman – A Code Security Auditing Tool for Ruby

What is a Brakeman? in the 1800s a brakeman was a rail worker responsible for…

Read more

Photon – A Very Handy Open Source OSINT Tool

Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a…

Read more

Singularity – Open Source DNS Rebinding Attack Tool

Security company NCC Group have released an open source tool for penetration testing named Singularity,…

Read more

DNSRecon – An Open Source DNS Enumeration Tool

DNSRecon is a python script used for DNS information gathering.  DNS information about a target…

Read more

BeRoot – A Post Exploitation Privilege Escalation Tool

BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…

Read more

A Review of DNS Enumeration Tool: DNSEnum

Back again with more DNS enumeration tools. This one has been around for quite some…

Read more

CMSeek – CMS Detection and Information Gathering

CMSeek is a python tool that is used to detect Content Management System (CMS) within…

Read more

Review of dnsx – a multi-purpose DNS toolkit

Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…

Read more

FinalRecon – An All In One OSINT Tool for Web Reconnaissance

Final Recon is a useful tool for gathering data about a target from open source…

Read more

Latest Cyber Security News | Network Security Hacking

Two Joomla Extensions Hit by Zero-Day File Upload Attacks Before Patches Landed

by Rebecca Sutton

CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …

by Rebecca Sutton

11 Old Signed UEFI Shims Just Broke Secure Boot on Millions of PCs

by Rebecca Sutton

How the GodDamn Ransomware Driver Bypasses Your EDR

by Rebecca Sutton

Adobe ColdFusion Vulnerabilities Are a Design Failure, Not Bad Luck

by Rebecca Sutton

Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896

by Rebecca Sutton

Free Hacking Tools

BruteDum- A network attack bruteforce tool

by Tyler Loftus

I found a doozie here ladies and gentlemen, with a little python script called BruteDum.  …

by Tyler Loftus

MHDDoS – A DDoS Attack Script With Over 50 Different Methods

by Tyler Loftus

A Review of DNS Enumeration Tool: DNSEnum

by Tyler Loftus

Harvest Subdomains with DNSHarvester

by Tyler Loftus

Capture the Flag

DC: 2 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …

by Unallocated Author

DC: 1 Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Mr-Robot Hacking Challenge Walkthrough (Vulnhub)

by Unallocated Author

Rickdiculously – A CTF Designed for Rick And Morty Fans

by Unallocated Author

Did you know ?

Kerberoasting Attack Explained Step by Step

by Rebecca Sutton

A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …

by Rebecca Sutton

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

by Rebecca Sutton

Credential Stuffing: A Defender’s Guide to Detecting Automated Login Attacks

by Rebecca Sutton

What Is a Brute Force Attack? A Practical Defender’s Guide

by Rebecca Sutton

Programming Languages for Cyber Security: What the Tools Actually Use

by Rebecca Sutton

Latest Hacking News