[ad_1] nmapAutomatorA script that you can run in the background! SummaryThe main goal for this script is to automate all of the process of recon/enumeration
[ad_1] An Obfuscation-Neglect Android Malware Scoring System ConceptsAndroid malware analysis engine is not a new story. Every antivirus company has their own secrets to build
[ad_1] Goby – Attack surface mapping The new generation of network security technology achieves rapid security emergency through the establishment of a complete asset database
[ad_1] A normal flask web app to learn win32api with code snippets and references. PrerequisiteYou need to download the following package before starting it pip
[ad_1] What’s PAKURIIn Japanese, imitating is called “Pakuru”. ぱくる (godan conjugation, hiragana and katakana パクる, rōmaji pakuru) eat with a wide open mouth steal when
[ad_1] Recently, the Tencent Blade Team discovered a set of SQLite vulnerabilities called “Magellan 2.0”, allowing hackers to remotely run various malicious programs on the
[ad_1] s3tk A security toolkit for Amazon S3 Installation pip install s3tk You can use the AWS CLI to set up your AWS credentials: pip install awscli
[ad_1] Nvidia has released an emergency security update for the GeForce Experience software to all users. The update aims to fix high-risk security vulnerabilities in
[ad_1] Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run
[ad_1] Attack Surface Mapper is a reconnaissance tool that uses a mixture of open source intellgence and active techniques to expand the attack surface of
[ad_1] Hackers can use vulnerabilities (CVE-2019-19781) in Citrix’s Application Delivery Controller (NetScaler ADC) and Gateway (NetScaler Gateway) to sneak into the company’s intranet. The vulnerability
[ad_1] rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we’d like it to
[ad_1] huskyCI is an open-source tool that performs security tests inside CI pipelines of multiple projects and centralizes all results into a database for further
[ad_1] Shelly adalah sebuah tool sederhana yang ditulis menggunakan Python, yang berfungsi untuk meremote sebuah website Instalation :$ git clone https://github.com/tegal1337/Shelly $ cd Shelly $
[ad_1] A New York woman was sentenced to time served and one year of supervised release for attempting to hire a hitman on the darkweb
[ad_1] A backdoor is a tool used to gain remote access to a machine.Typically, backdoor utilities such as NetCat have 2 main functions: to pipe
[ad_1] Spraykatz is a tool without any pretention able to retrieve credentials on Windows machines and large Active Directory environments.It simply tries to procdump machines
[ad_1] git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix
[ad_1] Twitter issued a new security alert. The company said that the security team found a serious security vulnerability in the Twitter app for Android.
[ad_1] Stowaway Stowaway is a Multi-hop proxy tool for security researchers and pentesters Users can easily proxy their network traffic to intranet nodes (multi-layer) PS:
[ad_1] For the jailbreak community, when someone finds a vulnerability that can jailbreak new devices and new versions of iOS, it often makes crackers and
[ad_1] OKadminFinder: Easy way to find admin panel of site. Requirements Linux sudo apt install torsudo apt install python3-socks (optional)pip3 install –user -r requirements.txt Windows
[ad_1] The fastest and cross-platform subdomain enumerator. What Findomain can do?It table gives you a idea why you should use findomain and what it can
[ad_1] Recently, we moved to the new Facebook fan page. So, we have never shared or posted anything Security Training Share Facebook fan page. Please
[ad_1] LazyRecon is a script written in Bash, it is intended to automate some tedious tasks of reconnaissance and information gathering. This tool allows you
[ad_1] In Bonn district court, a judge sentenced three members of a drug trafficking organization to suspended sentences and one to a prison sentence of
[ad_1] On December 17, Microsoft officially released the CVE-2019-1491 vulnerability warning and patch. Microsoft SharePoint is a set of corporate business collaboration platforms from Microsoft.
[ad_1] The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions.The idea is roughly as follows: Audit every call
[ad_1] Poseidon Poseidon began as a joint effort between two of the IQT Labs: Cyber Reboot and Lab41. The project’s goal is to explore approaches to better identify
[ad_1] Recently, Django officially released a security bulletin to fix a security vulnerability. The high-risk vulnerability is CVE-2019-19844. Django’s password-reset form uses a case-insensitive query
[ad_1] U.S. District Judge John C. Coughenour sentenced Matthew M Witters to seven years in prison for selling thousands of “doses of fentanyl” to customers
[ad_1] Imperva’s customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an
[ad_1] masscan is fast, nmap can fingerprint software and vulners is a huge vulnerability database. Silver is a front-end that allows complete utilization of these
[ad_1] BetterBackdoor A backdoor is a tool used to gain remote access to a machine. Typically, backdoor utilities such as NetCat have 2 main functions:
[ad_1] Extracting api keys and secrets by requesting each url at the your list.Installation python3 -m pip install -r requirements.txt Usage python3 secretx.py –list urlList.txt
[ad_1] Rich Mirch, a security researcher and penetration tester, discovered the vulnerability and wrote about on his personal blog after Signal released an update for
[ad_1] ReconCobra Reconcobra is Foot printing software for Ultimate Information Gathering Kali, Parrot OS, Black Arch, Termux, Android Led TV Interface Software have 82 Options
[ad_1] Silver Mass Vulnerability Scanner masscan is fast, nmap can fingerprint software and vulners is a huge vulnerability database. Silver is a front-end that allows
[ad_1] 360 Group cooperated with Mercedes-Benz and fixed 19 related potential vulnerabilities in Mercedes-Benz intelligent connected cars. It is reported that this is the first
[ad_1] A judge in a California court sentenced Jose Robert Porras III to five years and 10 months in federal prison for distributing a controlled
[ad_1] nodeCrypt is a linux Ransomware written in NodeJs that encrypt predefined files.This project was created for educational purposes, you are the sole responsible for
[ad_1] Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of
[ad_1] Europol coordinated raids in seven countries and provided information that led to the arrest of eleven people suspected of buying counterfeit euro notes on
[ad_1] Schneider Electric recently resolved DoS vulnerabilities in Modicon M580, M340, Quantum, and Premium controllers, and stated that all three defects were caused by improper
[ad_1] The OWASP Zed Attack Proxy (ZAP) is easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to
[ad_1] A United States District Judge sentenced Bryant Riyanto Budi of Matthews, North Carolina, to 78 months in prison for attempting to purchase radioactive material
[ad_1] pbtk – Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more
[ad_1] TheTHE is an environment intended to help analysts and hunters over the early stages of their work in an easier, unified and quicker way.
[ad_1] ReconCobra Reconcobra is Footprinting software for Ultimate Information Gathering Kali, Parrot OS, Black Arch, Termux, Android Led TV Interface The software has 82 Options
[ad_1] Nginx Log Security Analysis Script Features Statistics Top 20 Address SQL injection analysis Scanner alert analysis Exploit detection Sensitive path access File contains attack
[ad_1] EXIST is a web application for aggregating and analyzing CTI (cyber threat intelligence).EXIST is written by the following software. Python 3.5.4 Django 1.11.22 ConceptEXIST
[ad_1] CPH:SEC WAES at a Glance Doing HTB or other CTFs enumeration against targets with HTTP(S) can become trivial. It can get tiresome to always
[ad_1] Apple has enhanced parental controls in the latest official version of iOS 13.3, allowing parents to remotely load contact lists on their children ’s
[ad_1] Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components (Docker, Virtualbox and Golang), the communication and
[ad_1] This CyberRange project represents the first open-source Cyber Range blueprint in the world.This project provides a bootstrap framework for a complete offensive, defensive, reverse
[ad_1] Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system.Dsiem provides
[ad_1] A 35-year-old man from Eindhoven, Netherlands was sentenced to 48 months in prison for drug trafficking and money laundering. The defendant a variety of
[ad_1] AVCLASS++: Yet Another Massive Malware Labeling Tool avclassplusplus is an appealing complement to AVCLASS [1], a state-of-the-art malware labeling tool. AVCLASS++ is a labeling tool
[ad_1] This has only been tested on Kali.It depends on the msfrpc module for Python, described in detail here: https://www.trustwave.com/Resources/SpiderLabs-Blog/Scripting-Metasploit-using-MSGRPC/Install the necessary Kali packages and
[ad_1] The internet has brought us all closer together than ever before. Never before in our history has mankind been able to communicate so seamlessly.
[ad_1] Both Microsoft and Google have released software updates yesterday to fix some security vulnerabilities, including a zero-day vulnerability that has been exploited in the
[ad_1] Monitoring possible threats of your company on Internet is an impossible task to be achieved manually. Hence many threats of the company goes unnoticed
[ad_1] Security company Rapid7 has disclosed security vulnerabilities in three children’s smartwatches sold on Amazon. These three children’s smartwatches are the GreaSmart, the Jsbaby, and
[ad_1] hashcobra Hash Cracking tool. Usage $ ./hashcobra -H–==[ hashcobra by sepehrdad ]==–usage: hashcobra -o <opr> [options] | [misc]options: -a <alg> – hashing algorithm [default:
[ad_1] A Polish man residing in Ireland was sentenced to three years in prison suspended after he pleaded guilty to possession of hundreds of child
[ad_1] Recently, researchers have discovered that undocumented features in Intel CPUs allow attackers to manipulate Intel CPU voltages in a controlled manner to trigger calculation
[ad_1] tfsec tfsec uses static analysis of your terraforms templates to spot potential security issues. Now with terraform v0.12+ support. Features Checks for sensitive data
[ad_1] A Georgia man admitted his role as the ringleader of a large-scale drug trafficking operation responsible for producing and distributing up to 200,000 pills
[ad_1] The Attack Range solves two main challenges in development of detections. First, it allows the user to quickly build a small lab infrastructure as
[ad_1] A fast web fuzzer written in Go.Heavily inspired by the great projects gobuster and wfuzz. Features Fast! Allows fuzzing of HTTP header values, POST
[ad_1] On December 11, 2019, Microsoft and Adobe released the December security update. The types of vulnerabilities addressed include out-of-bounds reads and write, some untrusted
[ad_1] A 35-year-old man from Northern Portugal was sentenced to 76 months in prison for dark web drug trafficking and money laundering. The defendant will
[ad_1] When comparing the difference of a shared server to a private server configuration one thing that people never consider is the fact that on
[ad_1] This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence
[ad_1] Pretend to be busy or waiting for your computer when you should actually be doing real work! Impress people with your insane multitasking skills.
[ad_1] Loki: like Prometheus, but for logs. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost-effective
[ad_1] ReconPi – A lightweight recon tool that performs extensive reconnaissance with the latest tools using a Raspberry Pi.Start using that Raspberry Pi — I
[ad_1] CAINE (Computer Aided INvestigative Environment) is an Italian GNU/Linux live distribution created as a Digital Forensics project. Currently, the project manager is Nanni Bassetti (Bari –
[ad_1] Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between
[ad_1] A young man from Hull, United Kingdom was sentenced to 3 years in prison for selling ecstasy and ketamine sourced from the darkweb. The
[ad_1] pylane Pylane is a python vm injector with debug tools, based on gdb and ptrace. It uses gdb to trace python process, inject and
[ad_1] functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO (http://dynamorio.org/).These are some implemented features (based on DynamoRIO):
![[Blackhat Europe tool] RansomCoin: extract cryptocoin addresses and other indicators of compromise from binaries](https://i0.wp.com/cybarrior.com/wp-content/uploads/2019/12/Blackhat-Europe-tool-RansomCoin-extract-cryptocoin-addresses-and-other-indicators.png?fit=300%2C123&ssl=1)
[ad_1] RansomCoin Extracting metadata and hardcoded Indicators of Compromise from ransomware, in a scalable, efficient, way with cuckoo integrations. Ideally, is it run during cuckoo
[ad_1] Red Hat and CentOS have announced the availability of important kernel security updates for their Red Hat Enterprise Linux 7 and CentOS Linux 7
[ad_1] Two were sentenced prison for running a “major darkweb dug operation” out of their Liverpool home. According to evidence revealed in court, the duo
[ad_1] A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app’s HTTPS traffic using a proxy is probably the
[ad_1] Unvalidated redirects and forwards are possible when a web application accepts untrusted input that could cause the web application to redirect the request to
[ad_1] Antbot.pw provides a free, open API endpoint for checking a domain or email address against a frequently-updated list of disposable domains. CORS is enabled
[ad_1] Law enforcement in the Czech Republic arrested five individuals for running an international drug trafficking ring out of Brno. The group allegedly orchestrated the
[ad_1] RetDec is a retargetable machine-code decompiler based on LLVM.The decompiler is not limited to any particular target architecture, operating system, or executable file format:
[ad_1] Australian law enforcement arrested two suspected drug traffickers and seized more than $1.5 million in cryptocurrency after the Australian Border Force intercepted two packages
[ad_1] Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location
[ad_1] DNSTARS, the self-described “independent drug testing and publishing platform” is shutting down. The forum is most well known for hosting the results of drug
[ad_1] Lithnet Password Protection for Active Directory (LPP) enhances the options available to an organization wanting to ensure that all their Active Directory accounts have
[ad_1] Recently, security researchers at a professional application security protection company, Promon said that they found a vulnerability in the Android operating system and named
[ad_1] A simple CORS misconfiguration scannerBased on the research of James KettleCORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing
[ad_1] Nine members of a 13-member darkweb drug trafficking ring were imprisoned for their roles in the operation. The ring sold a variety of drugs
[ad_1] Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden (null terminated) registry key. This works by
[ad_1] Nessus XML Praser Requirements Python3 Django Tested on Ubuntu 18.04 What it does Vulnerability based parsing Service based parsing Host bases parsing Unsupported OS
[ad_1] Police in Austria shut down a large-scale drug trafficking organization that conducted operations electronically. According to the police, the group purchased drugs on the
[ad_1] CodeCat is a open source tool to help you in codereview, to find/track sinks and this points follow regex rules…How too install, step by
[ad_1] A small linux information collection script is mainly used for emergency response. It can be used under Debian or Centos.Features CPU TOP10, memory TOP10
[ad_1] A security issue discovered by security research company SafeBreach in Kaspersky Secure Connection, which itself is bundled into a range of other Kaspersky security
[ad_1] aSYNcrone is a C language based, mulltifunction SYN Flood DDoS Weapon. Disable the destination system by sending a SYN packet intensively to the destination.aSYNcrone’s POWER!!! USAGEgit
[ad_1] Recently unsealed court documents uncovered an FBI search warrant application requesting information on a PlayStation user from Sony. The allegedly user believed audio communication
[ad_1] Burp Suite extension to discover a apikey/tokens from HTTP response. Install download SecretFinder wget https://raw.githubusercontent.com/m4ll0k/BurpSuite-Secret_Finder/master/SecretFinder.pyorgit clone https://github.com/m4ll0k/BurpSuite-Secret_Finder.git now open Burp > Extender > Extensions
[ad_1] Google released a December 2019 Android security patch for its latest Android 10 mobile operating system series to address some of the most critical
[ad_1] Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty
[ad_1] With the rise of instant messaging applications such as WhatsApp, Signal, and Telegram. A large number of similar applications have begun to steal telecommunications
[ad_1] Operation and Arrests An international operation led by the Australian Federal Police (AFP) took down the Imminent Monitor web page and shut down the
[ad_1] Spraykatz is a tool without any pretention able to retrieve credentials on Windows machines and large Active Directory environments. It simply tries to procdump machines and parses dumps locally in
[ad_1] CAPE is a malware sandbox. It is derived from Cuckoo and is designed to automate the process of malware analysis with the goal of
[ad_1] ANDRAX is a Penetration Testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution,
[ad_1] Documentationhttps://docs.rs/goblin/changelog UsageGoblin requires rustc 1.31.1.Add to your Cargo.toml [dependencies]goblin = “0.1” Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation – wow! zero-copy, cross-platform,
[ad_1] Hyperpwn Hyperpwn is a Hyper plugin to improve the display when debugging with GDB. Hyperpwn needs GEF or pwndbg to be loaded in GDB as a backend. Hyperpwn handles
[ad_1] Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments. Quick reference Where to get help: the Pacu/CloudGoat/CCAT Community Slack,
[ad_1] Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information
[ad_1] Peasant Peasant is a LinkedIn reconnaissance utility written in Python3 that functions much like LinkedInt by @vysecurity. It authenticates to LinkedIn and uses the API to perform
[ad_1] The Federal Drug Agents Foundation provided a Lieutenant of the South Brunswick Police Department with an award for the takedown and arrest of the
[ad_1] The Mordor project provides pre-recorded security events generated by simulated adversarial techniques in the form of JavaScript Object Notation (JSON) files for easy consumption.
[ad_1] Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 (and all later versions) workstations/servers and to automate dynamic analysis
[ad_1] pax Exploit padding oracles for fun and profit! Pax (PAdding oracle eXploiter) is a tool for exploiting padding oracles in order to: Obtain plaintext
[ad_1] Your private data is being traded and sold all over the internet as we speak. Tons of leaks come out on a daily basis
[ad_1] Graphs help to spot anomalies and patterns in large datasets.This script takes netstat information from multiple hosts and formats them in a way to
[ad_1] Kam1n0 v2.x is scalable assembly management and analysis platform. It allows a user to first index a (large) collection of binaries into different repositories
[ad_1] “Opening Pandora’s Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones” is accepted to the 35th Annual Computer Security Applications Conference (ACSAC)
[ad_1] A Colorado judge sentenced a cocaine vendor to 66 months imprisonment for selling almost 50 kilograms of cocaine to his customers on a darkweb
[ad_1] In this section, we’ll explain what XML external entity injection is, describe some common examples, explain how to find and exploit various kinds of
[ad_1] HPE’s enterprise-class solid-state drives have time bombs. HPE issued an emergency safety notice saying that some of its models of solid-state drives will stop
[ad_1] RESim RESim is a dynamic system analysis tool that provides detailed insight into processes, programs, and data flow within networked computers. RESim simulates networks
[ad_1] We are incredibly excited to announce our fourth and final release of 2019, Kali Linux 2019.4. 2019.4 includes some exciting new updates: A new
[ad_1] Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations. UsageUsing Corsy is pretty simplepython corsy.py -u https://example.comA delay between
[ad_1] Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their
[ad_1] After an unexpected shutdown followed by days of silence from staff, Cryptonia Market administration announced a hiatus of the market until 2020 as well
[ad_1] Every day, businesses and political organizations understand more about the advantages of analyzing data. Increasingly, the more they understand, the more the public becomes
[ad_1] Dread is back online after an extended period of downtime. The forum relaunched with a large set of new features including UI improvements, coatrooms,
[ad_1] AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore
[ad_1] CloudGoat CloudGoat is Rhino Security Labs’ “Vulnerable by Design” AWS deployment tool. It allows you to hone your cloud cybersecurity skills by creating and
[ad_1] The Northern California Illicit Digital Economy Task Force updated their onion service to include the name of another darkweb vendor that federal investigators had
[ad_1] RE:TERNAL is a centralised purple team simulation platform. Reternal uses agents installed on a simulation network to execute various known red-teaming techniques in order
[ad_1] Inspired by https://github.com/jmagnusson/bgtunnel, which doesn’t work on Windows.See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py Requirements paramiko Installationsshtunnel is on PyPI, so simply run: pip install sshtunnel or easy_install
[ad_1] Glances is a cross-platform monitoring tool which aims to present a large amount of monitoring information through a curses or Web based interface. The
[ad_1] FDsploit FDsploit is a File inclusion & Directory Traversal fuzzer, enumeration & exploitation tool. Features The LFI-shell interface provides only the output of the
[ad_1] The purpose of this tool is to help penetration testers identify potentially valuable targets on the internal network environment. By aggregating netstat routes from
[ad_1] RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save
[ad_1] One member of a drug manufacturing ring in Pennsylvania was sentenced to 156 months in prison for selling counterfeit oxycodone pills on the darkweb.
[ad_1] procSpy procSpy is a Python application that monitors userspace commands being run via /proc parsing, and records said commands in a “queriable” fashion for
[ad_1] DNCI allows the injection of .Net code (.exe or .dll) remotely in unmanaged processes in windows. 1. Project StructureThe project is structured in: DNCI.Injector.Library
[ad_1] Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools
[ad_1] LiveTargetsFinder Generates lists of live hosts and URLs for targeting, automating the usage of Massdns, Masscan, and nmap to filter out unreachable hosts Given
[ad_1] Tooling that automates your social media interactions to collect posts, photos, videos, friends, followers and much more on Facebook. FeaturesA bot which scrapes almost
[ad_1] A resident of Pittsburgh, Pennsylvania, is set to spend the next 15 months in prison for purchasing Xanax from a darkweb marketplace for and
[ad_1] Fileless lateral movement tool that relies on ChangeServiceConfigA to run command. The beauty of this tool is that it doesn’t perform authentication against SMB
[ad_1] PICT – Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected,
[ad_1] Cock.li, a service known to most as an email provider, temporarily shut down many of their services “due to an ongoing legal search order.”
[ad_1] This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, Proxy History) and
[ad_1] Recently, Check Point researchers analyze a vulnerability (CVE-2019-10574) discovered in the Qualcomm Trusted Execution Environment (TEE) for Android devices. An attacker could exploit this
[ad_1] Given that we are almost always connected to the Internet on a daily basis, cybersecurity is a growing concern among all of us. From
[ad_1] A 19-year-old Austrian man was handed a suspended sentence after he admitted that he had purchased counterfeit euros on the dark web. The teen
[ad_1] Cross-platform backdoor using dns txt records. What is ddor?ddor is a cross platform light weight backdoor that uses txt records to execute commands on
[ad_1] Recently, Solr officially released a security update to fix RCE vulnerability (CVE-2019-12409) due to a bad config default. Solr is apache’s top-level open source
[ad_1] In many past internal penetration tests I often had problems with the existing Powershell Recon / Exploitation scripts due to missing proxy support. I
[ad_1] Android security flaws allow applications to access people’s cameras for secret video and audio recording. Android smartphones from companies such as Google and Samsung
[ad_1] On November 18, the official download site for the Monero CLI served a malicious binary for less than an hour. The malicious version of
[ad_1] SQL InjectionIn this section, we’ll explain what SQL injection is, describe some common examples, explain how to find and exploit various kinds of SQL
[ad_1] CryptoVenom CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding
[ad_1] Last weekend, the Chinese hacking contest, Tianfu Cup officially began in Chengdu, and hackers from China won the championship in this war. In two
[ad_1] Blind SQL Injection Tool with Golang.UsageDownload andor.go and go to the folder where the file andor.go located. And type this to command promt:go run
[ad_1] DetectionLab is tested weekly on Saturdays via a scheduled CircleCI workflow to ensure that builds are passing. PurposeThis lab has been designed with defenders
[ad_1] Scavenger Just the code of my OSINT bot searching for sensitive data leaks on different paste sites. Search terms: credentials private RSA keys WordPress
[ad_1] WhatsApp quietly patched a critical vulnerability in its application last month that could allow an attacker to remotely compromise a target device and potentially
[ad_1] [*] RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0. RedPeanut code execution is based
[ad_1] Dread suffered a crash that resulted in the loss of two weeks worth of data, including account changes, posts, comments, and even new account.
[ad_1] Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location
[ad_1] ssh tunnel SSH tunnels to a remote server.API allows either initializing the tunnel and starting it or using a with context, which will take
[ad_1] Vulnx is An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of Cms, fast cms detection,informations gathering and vulnerabilitie Scanning of
[ad_1] In a study funded by the US Department of Homeland Security, Kryptowire found a serious security risk from pre-installed applications on cheap Android smartphones.
[ad_1] Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner.Installation go get -u github.com/jaeles-project/jaeles Please
[ad_1] Ultimate Facebook Scraper (UFS) Tooling that automates your social media interactions to collect posts, photos, videos, friends, followers and much more on Facebook. Features A bot
[ad_1] Canonical has released a new set of Linux kernel security updates for all of its supported Ubuntu releases to address the latest Intel CPU
[ad_1] The U.S. Attorney’s Office Northern District of Alabama announced that 29 year old Ryan Thomas Carver pleaded guilty to possession of a collection of
[ad_1] As with many exploits, remote and local file inclusions are only a problem at the end of the encoding. Of course it takes a
[ad_1] The Debian Project released a new Linux kernel security update for its supported version of Debian GNU/Linux to address the latest vulnerabilities affecting Intel’s
![[Unpatch] Apache Flink remote code execution vulnerability alert](https://i0.wp.com/cybarrior.com/wp-content/uploads/2019/11/Unpatch-Apache-Flink-remote-code-execution-vulnerability-alert.jpg?fit=300%2C171&ssl=1)
[ad_1] Recently, the security team found the Apache Flink arbitrary Jar package to upload the attack data that caused the remote code execution vulnerability. The
[ad_1] This shell is the ultimate WinRM shell for hacking/pentesting. WinRM (Windows Remote Management) is the Microsoft implementation of WS-Management Protocol. A standard SOAP based
![[Unpatch] Apache Shiro Padding Oracle remote code execution vulnerability alert](https://i1.wp.com/cybarrior.com/wp-content/uploads/2019/11/Unpatch-Apache-Shiro-Padding-Oracle-remote-code-execution-vulnerability-alert.png?fit=300%2C103&ssl=1)
[ad_1] Recently, Apache Shiro Padding Oracle reveals remote code execution vulnerability. After we analysis and judgment, it is judged that the level of the vulnerability
[ad_1] Sigma Hunting App A Splunk App containing Sigma detection rules, which can be updated dynamically from a Git repository. Motivation Most of the modern
[ad_1] To prevent the Zombieload v2 attack that was just exposed, Microsoft Windows and Linux kernel teams have introduced methods to turn off Intel Transactional
[ad_1] This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only
[ad_1] SamSara Market, the official yet unofficial successor to Dream Market, has been down for several days without any explanation from the market’s administration. The
[ad_1] The Brave Privacy Browser is your fast, safe private web browser with ad blocker, private tabs and pop-up blocker. Browse without being tracked by
[ad_1] Mordor Gates The Mordor project provides pre-recorded security events generated by simulated adversarial techniques in the form of JavaScript Object Notation (JSON) files for
[ad_1] Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details.The extension
[ad_1] Two residents of Melbourne, Australia, admitted they had used the dark web and the postal system to import drugs into Australia for distribution. The
[ad_1] Easier network scanning with NetAss2 (Network Assessment Assistance Framework). Make it easy for Pentester to do penetration testing on network. Dependencies nmap (tool) zmap
[ad_1] Although 5G is faster and more secure than 4G, new research indicates that it still has some vulnerabilities, which poses a certain risk to
[ad_1] SharpHide Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden (null-terminated) registry key. This works by
[ad_1] On November 12, 2019, Microsoft routinely released a security update for November. The security update covers the Windows operating system, IE/Edge browser, scripting engine/ChakraCore,
[ad_1] Subdomain Scan With Ping Method. Flags Value Description –hostname example.com Domain for scan. –output Records the output with the domain name. –list /tmp/lists/example.txt Lister
[ad_1] One of the two defendants behind the Dream Market vendor account “The Drug Llama” was sentenced in a United States District Court to 108
[ad_1] IMPORTANTWhen using source or by downloading the code directly from the repository, it is important to run the database upgrade script if you experience
[ad_1] ngrev A graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the
[ad_1] HAL [/hel/] is a comprehensive reverse engineering and manipulation framework for gate-level netlists focusing on efficiency, extendability and portability. HAL comes with a fully-fledged
[ad_1] A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script
[ad_1] In the recent GeForce 441.12 release, NVIDIA fixed several undisclosed high-risk vulnerabilities, and these vulnerabilities also existed in Quadro, NVS, and Tesla’s Windows drivers.
[ad_1] RacePWN (Race Condition framework) RacePWN is a librace library and a racepwn utility that are designed to test a race condition attack through protocols
[ad_1] Although the JavaScript library jQuery is still being used, it is no longer as popular as it used to be. According to the open-source
[ad_1] From behind bars in a French prison, one of the accused administrators of DeepDotWeb provided his side of the story. Throughout the interview he
[ad_1] threat_note is a web application built by Defense Point Security to allow security researchers the ability to add and retrieve indicators related to their
[ad_1] PowerShell Script to perform a quick AD audit _____ ____ _____ _ _ _| _ | | _ |_ _ _| |_| |_| |
[ad_1] Kamerka-GUI Ultimate Internet of Things/Industrial Control Systems reconnaissance tool The main purpose of the ICS module of ꓘamerka is to map attack surfaces, in
[ad_1] A number of darknet marketplaces are joining forces to prevent scammers “from hopping between markets” after getting caught scamming. The project is open for
[ad_1] SGX-Step is an open-source framework to facilitate side-channel attack research on Intel SGX platforms. SGX-Step consists of an adversarial Linux kernel driver and user
[ad_1] DFIRtriage is a tool intended to provide Incident Responders with rapid host data. Written in Python, the code has been compiled to eliminate the
[ad_1] vulnerability scanner tool is using nmap and nse scripts to find vulnerabilitiesThis tool puts an additional value into vulnerability scanning with nmap. It uses
[ad_1] Sojobo is an emulator for the B2R2 framework. It was created to easier the analysis of potentially malicious files. It is totally developed in
[ad_1] Microsoft’s security team believes that a more destructive BlueKeep attack is coming, and urges users and companies to install application patches in a timely
[ad_1] Donut generates x86 or x64 shellcode from VBScript, JScript, EXE, DLL (including .NET Assemblies) files. This shellcode can be injected into an arbitrary Windows
[ad_1] Italian law enforcement announced the shutdown of Berlusconi Market and arrest of three individuals suspected of running the marketplace. The investigation into the market
[ad_1] Github search is quite powerful and useful feature and can be used to search sensitive data on the repositories. Collection of github dorks that
[ad_1] Squid is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching
[ad_1] EyeWitness is designed to take screenshots of websites provide some server header info, and identify default credentials if known.EyeWitness is designed to run on
[ad_1] The United States Attorney for the Southern District of New York announced that Hugh Brian Haney had admitted laundering more than $19 million worth
[ad_1] Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its
[ad_1] Christopher Michael Barnes, 36, of Los Angeles admitted that he was involved in the conspiracy to distribute drugs via the dark web vendor account
[ad_1] XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping
[ad_1] Firefox browsers for Mac and Windows have recently become targets of some malicious website attacks, which display false warning notifications and completely lock up
[ad_1] Recently, CCN security researcher Willian Worrall exposed a security flaw in Epic Games Store which players can play without barriers even if they have
[ad_1] A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI. AbstractTrivy (tri pronounced like trigger, vy pronounced like envy) is a simple and
[ad_1] Earlier this year, Microsoft made another exception to release a security update to Windows XP. This security update addresses the Windows RDP/RDS vulnerability. This
[ad_1] In an official statement, the Drug Enforcement Administration warned that 27 percent of the pills seized between January and March of this year contained
[ad_1] HTTP/HTTPS proxy over SSH. Installation Local machine: go get github.com/justmao945/mallory/cmd/mallory Remote server: need our old friend sshd Configueration Config fileDefault path is $HOME/.config/mallory.json, can
[ad_1] ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. Current featuresSome features ezXSS has Easy
[ad_1] Specialized privilege escalation checks for Linux systems.Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References
[ad_1] Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system firewall rules
[ad_1] Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory (including
[ad_1] Melissa Scanlan, 32, admitted her role in a darkweb drug distribution conspiracy where she had operated a darkweb vendor account under the name “The
[ad_1] Inspects source code for security problems by scanning the Go AST. Install CI Installation # binary will be $GOPATH/bin/goseccurl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s
[ad_1] snare – Super Next generation Advanced Reactive honEypot Super Next generation Advanced Reactive honEypot AboutSNARE is a web application honeypot sensor attracting all sort
[ad_1] Luis Fernandez, one of two co-conspirators convicted of selling carfentanil and other opioids through the “Chemsusa” darkweb vendor account, was sentenced to 151 months
[ad_1] Two serious zero-day vulnerabilities have been fixed in the emergency patch released yesterday by Google, and one of them has been exploited by hackers.
[ad_1] Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architecture, both 32bit and 64bit code and AArch64 (New!). The
[ad_1] Richard Huckle, the target of a complex investigation into a darkweb forum, was stabbed to death in his prison cell where he was serving
[ad_1] AtomShields Cli is a Command-Line Interface to use the software AtomShields Installation pip install atomshieldscli Basic usage ascli <action> <context> –target <path> –name <project_name>
[ad_1] A 43 year old man from Pforzheim, Germany is suspected of running a dark web child pornography forum from a server located in his
[ad_1] Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Installation git clone https://github.com/j3ssie/Osmedeuscd Osmedeus./install.sh This
[ad_1] A 22-year-old Swedish man accused of using the dark web and PostNord to supply drugs to drug users in all parts of Sweden has
[ad_1] PESTO is a Python script that extracts and saves in a database some PE file security characteristics or flags searching for every PE binary
[ad_1] A POC HTTP Botnet designed to replicate a full weaponised commercial botnet DisclaimerThis project should be used for authorized testing or educational purposes only.The
[ad_1] A 20-year-old German man was sentenced to probation after admitting that he had used the darkweb to buy cocaine, marijuana, and a counterfeit 50
[ad_1] What is this?Certain characters in passwords (‘O’ and ‘0’, ‘I’ and ‘l’, etc.) can be hard to identify when you need to type them
[ad_1] Security guides from various Internet criminal communities aren’t all that uncommon. Over the years we have seen such guides posted onto drug forums, hacking
[ad_1] On October 31, 2019, the security researcher S00pY on GitHub release the Apache Solr RCE via the Velocity template PoC. After testing, the poc
[ad_1] An extendable tool to extract and aggregate IOCs from threat feeds.Integrates out-of-the-box with ThreatKB and MISP, and can fit seamlessly into any existing worflow
[ad_1] In an effort to cut down on the use of phishing links and to simplify the verification of mirror addresses for darkweb marketplaces, Dark.fail
[ad_1] POCKINT (a.k.a. Pocket Intelligence) is the OSINT swiss army knife for DFIR/OSINT professionals. Designed to be a lightweight and portable GUI program (to be
[ad_1] A former high school math teacher was imprisoned for more than three years after he pleaded guilty to receipt and possession of child pornography.
[ad_1] This is a modular forensic triage collection framework designed to access various forensic artifacts on macOS, parse them, and present them in formats viable
[ad_1] LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation. ConnectionSet your IP and port you want it
[ad_1] According to a recent report, illicit international cannabis sales on dark web marketplaces by Canadian vendors have been on the rise since its recreational
[ad_1] Greg Kroah-Hartman, a stable kernel maintainer, said in a keynote speech at the Open Source Summit Europe that the security of Intel chips will
[ad_1] XORpass is an encoder to bypass WAF filters using XOR operations. Installation & Usage git clone https://github.com/devploit/XORpasscd XORpass$ php encode.php STRING$ php decode.php “XORed
[ad_1] Cybercrime researchers discovered a so-called “trojanized version” of the Tor Browser responsible for stealing $40,000 from users of Russian darknet markets. The infected version
[ad_1] Microsoft acknowledges a security vulnerability on Windows 10 Mobile that “allows a user to access files and folders through the locked screen“. The good
[ad_1] Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details,
[ad_1] The Google Chrome development team has now released a new version of the stable channel, Chrome v77.0.3865.120 which is mainly a security improvement that
[ad_1] In October, officials at the Customs Office in Vienna opened an investigation into a 22-year-old who had ordered several packages of marijuana from the
[ad_1] Reconnaissance Real IP address for Cloudflare Bypass. Preparation: 1. CompleteDNS API Create an account at completedns.com and verify first. Input your email and password
[ad_1] Recently, Morphisec Labs researchers revealed that a hacker organization is using the zero-day vulnerability of the Bonjour component to attack, which is likely to
[ad_1] The German Federal Ministry of Finance claimed that Monero and other privacy coins make tracing money impossible and thus lend themselves to criminal activity
[ad_1] The Windows 10 Update Assistant, has recently been revealed by researchers to have significant security breaches affecting tens of millions of home and business
[ad_1] [*] CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom?CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all
[ad_1] Recently, SafeBreach Labs security researchers revealed a privilege escalation vulnerability (CVE-2019-6333) in a pre-installed HP computer, HP Touchpoint Analytics that could allow an attacker
[ad_1] An automated blind-xss search plugin for Burp Suite. InstallationGit clone https://github.com/wish-i-was/femida.git Burp -> Extender -> Add -> find and select blind-xss.py How to use
[ad_1] The BBC launched a Tor version of its international news website in an attempt to thwart censorship in regions where access to the BBC
[ad_1] Just two days ago, a mobile security company, Adaptive Mobile, which discovered the Simjacker attack, released a list of local mobile carriers shipping SIM
[ad_1] Tor Browser 9.0 is the first stable release based on Firefox 68 ESR and contains a number of updates to other components as well
[ad_1] As one of the most commonly used utilities in Linux, Sudo is installed on almost every UNIX and Linux distribution for users to invoke
[ad_1] A United States judge ordered Christopher Bania, a recently convicted darkweb dealer who admitted selling a variety of drugs on Alphabay, Hansa, Dream Market,
[ad_1] As the name might suggest AutoSploit attempts to automate the exploitation of remote hosts. Targets can be collected automatically through Shodan, Censys or Zoomeye.
[ad_1] Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in
[ad_1] HomePwn is a framework that provides features to audit and pentesting devices that company employees can use in their day-to-day work and inside the
[ad_1] Recently, Adobe released security updates for Experience Manager, Experience Manager Forms, Acrobat and Reader, and Download Manager to fix 82 vulnerabilities in these products.
[ad_1] A California darkweb vendor was sentenced to five years in prison for selling methamphetamine on the darkweb after pleading guilty to related charges earlier
[ad_1] Tails is a live system that aims to preserve your privacy and anonymity. It helps you to use the Internet anonymously and circumvent censorship
[ad_1] A security researcher said that serious security vulnerabilities in Linux could cause nearby devices that use WiFi signals to crash or be completely controlled
[ad_1] Microsoft has introduced new microcode updates (KB4497165) for Windows 10 Version 1903/Windows Server 2019 Version 1903 today. This microcode update is mainly used to
[ad_1] Recently, PHP officially reveals a security vulnerability (CVE-2019-11043) that caused remote code execution in the case of improper nginx configuration. In certain nginx +
[ad_1] The Japanese hotel chain HIS Group apologizes for neglecting warnings, and its indoor robots can be invaded and remotely view video footage from the
[ad_1] IntroductionWeb applications use parameters (or queries) to accept user input, take the following example into considerationhttp://api.example.com/v1/userinfo?id=751634589This URL seems to load user information for a
[ad_1] A ready to use JSONP endpoints to help bypass content security policy of different websites.The tool was presented during HackIT 2018 in Kiev. The
[ad_1] Recently, revealed by Security Research Labs researchers Luise Frerichs and Fabian Bräunlein, there are major loopholes in Alexa and GoogleHome. The two products are
[ad_1] The Maxthon Browser is a popular browser in China and Europe. Although the market share is not particularly high, the overall reputation has been
[ad_1] The Northern California Illicit Digital Economy Task Force, a task force with an active presence on darkweb forums and marketplaces, reportedly identified yet another
[ad_1] A datasource assessment on an event level to show potential coverage of the “MITRE ATT&CK” framework.This tool is developed by me and has no
Grow your skills and advance your career with StationX. A Comprehensive online training platform for security professionals!
RTS (Realtime scrapper) is a tool developed to scrap all pasties,github,reddit..etc in real time to identify occurrence of search terms configured. Upon match an email
p0wny@shell:~# is a very basic, single-file, PHP shell. It can be used to quickly execute commands on a server when pentesting a PHP application. Use
If you don’t want to give your phone number to a website while creating an account, DON’T GIVE IT TO THEM, because today I’m going
This tool will search an updated database for a specific organization’s ASN then use the latter to look up all IP addresses (IPv4 and IPv6)
Game hacker apps for android allow you to change the code of the games and use it to for your player advantage.
PRET is a new tool for printer security testing developed in the scope of a Master’s Thesis at Ruhr University Bochum. It connects to a
DroidSheep is an android tool developed by Andreas Koch for security analysis in wireless networks. It is basically a session hijacking tool that allows hackers to
PackETH is GUI and CLI packet generator tool for ethernet. It allows you to create and send any possible packet or sequence of packets on
Six people in Georgia have been indicted and charged in federal court for charges related to manufacturing and distributing drugs through the dark web.
DevAudit is an open-source, cross-platform, multi-purpose security auditing tool targeted at developers and teams adopting DevOps and DevSecOps that detects security vulnerabilities at multiple levels
Paypal credit card phishing script to download and use on remote server.
Carding is term described as a trick whereby products are being shopped/ordered from any online shops e.g Amazon, Jumia, FlipKart using Fake Cards(Credit/Debit).
Threat Intelligence Tools are more often used by security industries to test the vulnerabilities in network and applications. It helps for the collection and analysis
In a bid to bolster its capabilities to tackle threats emanating from hackers, mostly from China and Pakistan, India is all set to have Defence
After a seizure notice showed up on Wall Street Market’s homepage Thursday, authorities are now officially confirming that they’ve seized the market. They have also
Those of you who frequent the darkweb should be familiar with VPN (Virtual Private Network) services and have done some research to find a trustworthy
Malicious is a malware downloading tool written in python 2 that contains 70 scripts to exploit android, windows, macosx and linux machines.
Kidux Pastebin Grabber allows one to easily obtain and create combo lists for cracking any account.
A Third Party developer called “Anonymous” has developed a Linux-self contained App called “Termux” which is used to install Linux based apps in Android and
The single most common causes of a broken Kali Linux installation are following unofficial advice, and particularly arbitrarily populating the system’s sources.list file with unofficial repositories.
Xtreme Download Manager is a powerful tool to increase download speed up-to 500%, save streaming videos from YouTube, Metacafe, Daily-Motion, Google Video or any other
QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as
The Tor browser is a powerful free tool for browsing the internet anonymously that also unlocks a portion of the deep web in the form
You’ve heard of malware, ransomware, botnets, and the like. What you don’t hear about is the technology behind these threats. These threats all have to
Developed by Ravi Kumar, Hackode is a popular Android app meant to be used by professionals working in the cyber security domain as well as
With so many different VPNs on the market – all promising to keep you secure and anonymous – how can you find the best VPN
It is extremely easy to access the dark web and even easier to be detected on it if you don’t take precautions. If you are
VPNs are well known and trusted tools for protecting users’ privacy when browsing the Internet. But if you think this is the only thing they
One little secret of the VPN industry is that most VPNs leak .In one in-depth study of Android free VPN apps, researchers found that 84% of the
Android is the biggest organized base of any mobile platform and is developing fast—every day. Besides, Android is rising as the most extended operating system
Cloud Computing Penetration Testing is a method of actively checking and examining the Cloud system by simulating the attack from the malicious code.
Web server pen testing performing under 3 major category which is identity, Analyse and Report Vulnerabilities such as authentication weakness, configuration errors, protocol Relation vulnerabilities.
Certain types of software have long had a reputation for being very expensive. As cloud computing has become more popular, many popular software packages have
Like an intrusion detection system (IDS), an intrusion prevention system (IPS) screens network traffic. An Intrusion Prevention System (IPS) is a framework that screens a
IoAs is some events that could reveal an active attack before indicators of compromise become visible. Use of IoAs provides a way to shift from
The Dark Web, Deep Web or Darknet is a term that refers specifically to a collection of websites that are publicly visible, but hide the
Command line obfuscation has been proved to be a non-negligible factor in fileless malware or malicious actors that are “living off the land”. To bypass
Here we listed and documented the best forums for both networks — the “ClearNet” and “DarkWeb”. Before we get into this, it is important to
Kube-hunter hunts for security weaknesses in Kubernetes clusters. The tool was developed to increase awareness and visibility for security issues in Kubernetes environments.
When Manhattan’s district attorney received a tip-off about suspicious ATM withdrawals in 2017, authorities never expected to unravel a sophisticated dark net drug operation on
Production values aside, IT podcasts are frequently guilty of treating the audience like they are either an 83-year-old grandmother with only the vaguest notion of
In New Jersey’s largest-ever drug bust, agents seized large quantities of fake Xanax and fentanyl-laced heroin, along with pill presses, mixers and other equipment. The
Here we listed the best operating systems used today by hackers, pentesters, blue and red teamers. (basically anyone in the security sector) These include penetration
Born from an idea of Stefano Fratepietro, DEFT (acronym for Digital Evidence & Forensics Toolkit) is a distribution made for Digital Forensics and Incident Response,
BackBox Linux is a penetration testing and security assessment oriented Linux distribution providing a network and systems analysis toolkit. It includes some of the most
T-Pot is based on debian. The honeypot daemons as well as other support components being used have been paravirtualized using docker. This allowed developers to run
Security Onion is a free and open source Linux distribution for intrusion detection, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Snort,
This project was a DARPA CFT funded project that is now being released through OWASP. It is focused on providing a live environment for mobile
RedHunt aims to be a one stop shop for all your threat emulation and threat hunting needs by integrating attacker’s arsenal as well as defender’s
Dracos Linux is an open source operating system provides to penetration testing. Packed with a ton of pentest tools including information gathering, forensics, malware analysis,
Qubes OS is a security-oriented operating system (OS). The OS is the software that runs all the other programs on a computer. Qubes is free
BlackArch Linux is an open source distribution of Linux derived from the lightweight and powerful Arch Linux operating system and designed from the ground up
Selfhosting is the process of locally hosting and managing applications instead of renting from SaaS providers. This is a long list of Free Software network
SIEM software products and services combine security information management (SIM) and security event management (SEM). They provide real-time analysis of security alerts generated by network
We are in the complex world where attacks are increasing day by day, so today the cyber intelligence depends on siem as a part of
Today’s Cyber security operations center (CSOC) should have everything it needs to mount a competent defense of the ever-changing information technology (IT) enterprise. Here we’ll
A hacker known as Gnosticplayers has dumped his fifth collection of stolen data on the dark web since February. The latest batch includes data from
pwnedOrNot uses haveibeenpwned v2 api to test email accounts and tries to find the password in Pastebin Dumps.
A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on
NordVPN is a very popular VPN service with a large customer base. While it is highly recommended on many sites, it can be difficult to
VPN.ac is a Romania-based VPN service that provides users with advanced encryption, very secure apps, and excellent performance. Their network consists entirely of dedicated bare-metal servers
In short, these are just international surveillance alliances representing various countries around the world. These surveillance alliances work together to collect and share mass surveillance
Cyber security affects businesses of all sizes, and in every industry. Today it is a board-level agenda item, which has been placed at number three
Rancher Labs introduced k3OS, the industry’s first extremely lightweight operating system for Kubernetes. It has extremely low resource consumption, minimal operation, and second-level boot, which
Parrot 4.6 Released by Parrot security with so many updates that bring all the hacking tools on the table with new futures and important bug
Docker Hub Hacked, sensitive data more than 190,000 accounts may have exposed. Docker Hub discovered the unauthorized access to a single Hub database On Thursday,
An sms bombing tool for Andriod, Linux and Windows.
Due to popular demand we have listed free IP booters and a tutorial to kick users offline on your PS4 / Xbox.
By attacking the designated IP address assigned to your opponent, you can kick/drop the player and he will be disconnected back to the main menu.
A 33-year-old Danish man was handed a four year and three month prison sentence for his role in an extortion case on April 8. The
This tool is made for Pentesters to use during a penetration test to enumerate and to use in CTF for combine, manipulation, permutation and transform
WiFi-Pumpkin is security auditing tool that provide the Rogue Access Point to MiTM (Man-In-The-Middle) and network attacks. This tool is capable of creating fake access
A brand new Netflix series is inspired by the true story of a German teenager who ran a multi-million dollar dark web based drug empire
Ranger is a command-line driven attack and penetration testing tool, which has the ability to use an instantiated catapult server to deliver capabilities against Windows
Intercepter NG is very similar to wireshark in displaying network packets and able to capture traffic remotely so It enables you to run a packet
Linux Kodachi operating system is based on Debian 9.5 Xbuntu 18.04 LTS, that it will provide you with a secure, anti-forensic, an anonymous operating system
Osmedeus allows you to run a collection of awesome tools for reconnaissance and vulnerability scanning against a target.
This tool will automatically make your basic pentesting tasks like information gathering, security auditing, and reporting.
EasySploit – Metasploit automation (EASIER and FASTER than EVER)
Air India servers shut down for several hours due to the internal glitch that affects the flight operations all around the world and Thousands of
Genesis Store, an invite-only marketplace on the dark web, is offering more than 60,000 stolen profiles. The credentials on sale include credit card details, browser
A detailed list of the top 5 network adapters for wifi hacking with kali linux.
Z-Shadow automates the phishing process by generating links you forward to the victim.
iDope is one of those torrent search engines that are worth being mentioned. It works similar to other well-known torrent search engines like Torrentz or Toorgle
A list of KickassTorrents proxies, mirrors, and some of the popular and best alternatives.
When we have to search something on the Internet, our mind by default goes to Google or Bing. Obviously, our mind is tuned that way,
You can use ropper to look at information about files in different file formats and you can find ROP and JOP gadgets to build chains
Marvel’s latest and perhaps the most anticipated flick ever to be released Avengers: End Game has become an object of controversy lately as hackers and
Demonsaw is a new type of information sharing application that allows you to share your files securely. It’s the next leap in the evolution of
Bully is a new implementation of the WPS (Wifi Protected Setup) brute force attack. It’s almost identical as other already existing WPS brute force attack
According to a recent report, some unprotected databases have leaked around 60 million records. The leaked data allegedly belongs to LinkedIn users. However, the data
A man who processed orders for the darknet vendor account “JetSetLife” has been sentenced to 10 years in prison.
Scapy is a very powerful packet manipulation program and library, written in Python. It allows you to: forge / decode packets of a wide number
If you want to make sure that your true identity remains a secret even if you want to talk over the Internet, you can rely
Net Ghost is the ultimate free solution for all your proxy needs. If you’re looking for a free, simple and, easy to use program which
After being down for over three years, one of the largest and most notorious hacking forums is back online under new ownership.
The LAN Turtle is a covert Systems Administration and Pentesting tool providing stealth remote access, network intelligence gathering, and MiTM (man-in-the-middle) surveillance capabilities through a
Bash Bunny is a simple and powerful multi-function USB attack device and automation platform for all pentesters and sysadmins, designed by Hak5, which allows you
This question has immense value when it comes to Gmail password recovery. Why? When initiating a password reset using the Gmail Contact Form, you have
Secret hack codes are usually hidden from users to prevent misuse and exploit. These codes can reveal additional information, run manufacture tests, factory reset, check
Sitadel is basically an update for WAScan making it compatible for python >= 3.4 It allows more flexibility for you to write new modules and
As reported by Catalin Climpanu, some of the tools used by OilRig attack group have been leaked by a persona using the “Lab Dookhtegan pseudonym”.
The 3DS emulator enables to play your lovable classic games such as Super Mario, Top Gun, Base Wars. Ice climber with your iOS, Android and
Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle
The PenTesters Framework (PTF) is a Python script designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing. As pentesters,
WiFite2 is a complete rewrite of Wifite – a Python script for auditing wireless networks. It runs existing wireless-auditing tools for you, so you won’t need
Signaling System No. 7 (SS7) is a series of telephony signaling protocols. Also known as CCS7 (Common Channel Signaling System 7) or CCIS7 (Common Channel Interoffice Signaling 7),
SiGploit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile
ZMap is an open source single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap
Massive SQL Injection Vulnerability Scanner
South Africa has witnessed an explosion in cybercrime namely due to the advancement of ICT infrastructure and broadband connectivity in both the public and private
iCloudBrutter is a simple python (3.x) script to perform basic bruteforce attack againts AppleID.
DroidJack is an android RAT which gives you the power to establish control over your victim’s Android devices with an easy to use GUI and
Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based
Skype Log Viewer allows you to view all of your Skype chat logs and then easily export them as text files.
Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data