Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…
Dnsx is a fast and multi-purpose DNS toolkit that allows you to run multiple probers…
Turbolist3r is a subdomain enumeration tool which can identify subdomain takeovers. It is heavily based…
PrivilegeEsc-Linux is a simple script which checks the security on a Linux machine. It can…
Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…
Uniscan is an open source tool capable of scanning web applications for critical vulnerabilities, such…
What is JFScan? JFScan is a great enumeration tool created by nullt3r written mainly in…
Security company NCC Group have released an open source tool for penetration testing named Singularity,…
The Evil Access Point (AP) attack has been around for a long time. There are…
ARPwner is a GUI based tool that can perform tasks like ARP and DNS spoofing.…
Final Recon is a useful tool for gathering data about a target from open source…
Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
To contain the rising incidents of web skimming attacks on e-stores, Target has released its …
Researchers have found active phishing campaigns exploiting a zero-day vulnerability in the Zimbra email platform. …
