The Evil Access Point (AP) attack has been around for a long time. There are…
Sn1per is an automated scanner that can be used during a penetration test to enumerate…
Nuclei is a tool that is used to send requests across the given target based…
Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…
PhishX is a python tool that can capture user credentials using a spear phishing attack.…
BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…
YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…
Reconnaissance is one of the first steps to conduct within a pen test engagement. During…
Today LHN have been looking at Airgeddon, on initial inspection it seems to be a…
Back again with more DNS enumeration tools. This one has been around for quite some…
Winpayloads is a python based tool which combines some of the Powershell Empire features along…
Brosec is an open source terminal based tool to help all the security professionals generate…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
Researchers have discovered multiple security vulnerabilities in Wyze Cam smart cameras exposing saved videos to …
US CISA has recently warned of cyberattacks on internet-connected UPS devices. Thus, users must remain …
