Net Creds is a free tool that sniffs passwords and hashes from a network interface.…
The Operative Framework tool can be used within a red team/social engineering engagement to collect…
Note that InfoG 1 is now deprecated, use version 2 instead: https://github.com/Tech-Sec/InfoG.git InfoG is a Shellscript…
Webvulnscan is a web application scanner that automates vulnerability assessment tasks. The tool can automatically…
With Sherlock you can search across a vast number of social platforms for a username.…
Fluxion is a wifi security analysis tool that can simulate wifi attacks using the MITM…
Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…
Cloakify Factory is a tool to transforms any file type into a list of harmless…
Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…
What is this dumpster diving tool you speak of? The creator of this tool has…
BadKarma is a GUI based network reconnaissance tool that can gather useful network information at…
XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
Researchers have discovered a new cryptocurrency-related malware campaign in the wild. Identified as “SpyAgent, this …
Researchers from Google Project Zero have discovered numerous vulnerabilities in the Zoom app that could …
