Reconnaissance is one of the first steps to conduct within a pen test engagement. During…
AutoRecon is an enumeration tool that performs automated enumeration with multi-threaded capabilities. It is purposely…
Httpx is a fast and multi-purpose HTTP toolkit that allows the user to run multiple…
So what is this subfinder tool all about? Subfinder is a subdomain discovery tool that…
4CAN V2 is a Raspberry Pi project created by the Cisco team in order to…
MassBleed is an open source tool used for scanning SSL vulnerabilities in web applications. The…
I know what you are thinking, bruteforce doesn’t work anymore in many cases. However, Blazy…
Aquatone is a tool programmed by go-lang to inspect domains/check their status and also provide…
Malware showcase is a Github repository that contains examples of malware usage and behavior, this…
Modlishka is a go based phishing proxy that takes your phishing campaigns to the next…
BeRoot is a post-exploitation tool to check for common misconfigurations which can allow an attacker…
Many times when you want to perform an exploitation to a windows target, you need…
A critical flaw in Gitea’s official Docker image let anyone impersonate an admin with one …
I found a doozie here ladies and gentlemen, with a little python script called BruteDum. …
Hello Community! We have just completed first vulnhub machine of DC series by DCAU in …
A practitioner’s breakdown of the CSRF attack: how the forged request works, two documented exploits, …
PayPal has confirmed a bug in its website that could expose users’ email addresses and …
The GandCrab’s replacement Sodinokibi has been into the news a lot recently. The evil (or …
