Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…
Tplmap is a python tool that can find code injection and Server Side Templates Injection…
Sqlmap is an open source tool used to test the SQL injection vulnerabilities within web…
Security company NCC Group have released an open source tool for penetration testing named Singularity,…
CMSeek is a python tool that is used to detect Content Management System (CMS) within…
The Operative Framework tool can be used within a red team/social engineering engagement to collect…
Damn Small XSS Scanner (DSXS) is a great tool for finding cross site scripting vulnerabilities,…
Got a huge list of targets that you’d like to enumerate but can’t really visit…
Wifi Pumpkin is a security audit framework used to test the security of wifi against…
BadKarma is a GUI based network reconnaissance tool that can gather useful network information at…
Net Creds is a free tool that sniffs passwords and hashes from a network interface.…
RapidScan is a python based scanning tool used for analyzing vulnerabilities in web applications. The…
A critical flaw in Gitea’s official Docker image let anyone impersonate an admin with one …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A practitioner’s breakdown of the CSRF attack: how the forged request works, two documented exploits, …
Once again, thousands of WordPress websites are exposed to security threats due to vulnerable plugins. …
Amidst all the new malware that emerge every day, some old viruses also reappear after …
