2024-01-21 // Today, utilize GSSAPI-Abuse for Active Directory vulnerability detection, HackTheBox’s Bookworm challenge exploiting XSS and SQL injection, Bash commands for network management, PHunter for OSINT phone analysis, CoWitness for web app testing simulation, IPATool for iOS app retrieval, Logboost for enhanced log analysis, a hardware hacking infographic, AngryOxide for advanced WiFi exploitation, WScan’s machine learning-based web security scanner, a V8 JavaScript engine exploit in Chrome, Freeze.rs for EDR evasion in Rust, and AllForOne’s comprehensive Nuclei YAML template collection. [more...]

2024-01-20 // Today, explore ChopChopGo for rapid Linux log threat hunting, Novaldr’s Rust-based malware techniques, Ghidra for Android app reverse engineering, basics of Hashcat for ethical password cracking, FalconHound as a Blue Team multitool, ADCsync for NTLM hash extraction, and Evernote’s MacOS flaw with Electroniz3r detection. [more...]

2024-01-19 // Today, pull apart reverse engineering for web apps with AST analysis, RustHound for Active Directory data collection, youneverknow00’s kernelmode DLL injector, pwndoc-ng and pwndoc for pentest reporting, GraphRunner for post-exploitation on Microsoft Entra IDS, TruffleHog for secret detection in code, U-Boot and UART for Android rooting, and techniques to bypass remote browser isolation. [more...]

2024-01-18 // Today, discover tools like noxer for automating Android pentesting in Nox Emulator, sbscan for detecting Spring Framework vulnerabilities, Kaspersky’s iShutdown for spotting iOS spyware, a new Linux kernel exploit for root access, PyGPOAbuse for editing GPOs, an intro to YARA for reverse engineering, a Cobalt Strike BOF for checking DLL hijacking, techniques for reversing obfuscated JavaScript, the versatile Flipper Zero for hacking, AVRed for improving red teaming obfuscation, and Kaspersky’s scripts for iShutdown analysis on iOS. [more...]

2024-01-17 // Today, learn about CloudRecon for SSL certificate-based asset discovery, a script for detecting Ivanti Connect Secure vulnerabilities, explore Web LLM attack techniques, apply Linux hardening techniques, understand crypto drainer risks in account takeovers, use Xeol Scanner to find outdated software, set up Caldera for cyber attack simulations, discover Linikatzv2 for Active Directory attacks, Ken Shirriff’s exploration of the Bendix CADC, and Ivanti’s critical security vulnerabilities requiring immediate mitigation. [more...]