With Sherlock you can search across a vast number of social platforms for a username.…
Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments…
CMSeek is an open-source tool that analyzes the regex of websites in order to detect…
Every reconnaissance phase has a standard checklist that is to be followed. If you’ve ever…
CrackMapExec(CME) is a post exploitation tool that can be used for tasks like cracking administrative…
So what is this Osueta script all about? Osueta is a powerful python script used…
Trape is a tool written in python that can aid in tracking a client after…
Knock is a python based tool for enumerating subdomains on a targeted domain. You can…
Net Creds is a free tool that sniffs passwords and hashes from a network interface.…
BoomER is a Command-line interface python open-source framework fully developed in Python 3.X for post-exploitation…
YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…
AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…
CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers exploited …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, …
Multiple critical vulnerabilities existed in the WordPress plugin Spam protection, Anti-Spam, FireWall. Exploiting these vulnerabilities …
The threat actor group RomCom have exploited two zero days in its recent backdoor campaigns. …
