Offensive Security Tool: Pyramid
Pyramid is a tool to perform post-exploitation task in an evasive manner, executing offensive tooling from a signed binary (e.g. python.exe) by importing their dependencies in memory.
Recon Tool: Dome
Dome is a fast and reliable Subdomain Enumeration Tool that facilitates active and passive scanning to discover subdomains and identify open ports.
OSINT Tool: GooFuzz
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target’s server.
Recon Tool: Sniffer
Sniffer is a network troubleshooting tool that lets you analyze network traffic and processes without loading any kernel modules. With a user-friendly TUI interface, Sniffer captures and records packet information using gopacket.
Malware Analysis Tool: retoolkit
Retoolkit is a Reverse Engineering and Malware Analysis collection of tools on x86 and x64 Windows systems. It aims to provide a set of useful utilities for binary analysis and reverse engineering which includes various tools such as disassemblers, debuggers, and more.
Offensive Security Tool: Go365
Go365 is an Office365 user attack tool and its designed to help security professionals and researchers perform user enumeration and password guessing attacks on organizations that use Office365.
Recent News
Critical GitHub Vulnerability Allowed Remote Code Execution via Single “git push”
Critical nginx-ui Flaw Under Active Exploitation Enables Full Server Takeover
React2Shell Exploited in Mass Credential Harvesting Campaign Targeting 700+ Hosts
EvilTokens Phishing Service Fuels Large-Scale Microsoft 365 Account Takeover Campaign
Attackers Impersonate IT Support on Microsoft Teams to Deploy A0Backdoor Malware
State-Sponsored Attack Hijacks Notepad++ Update Infrastructure to Deliver Malware
Fortinet Fixes Actively Exploited FortiOS SSO Auth Bypass
CISA Flags Actively Exploited VMware vCenter RCE in KEV Catalog
Reprompt Attack Lets Attackers Exfiltrate Data From Microsoft Copilot With a Single Click
Node.js Fixes Critical DoS Flaw That Could Crash “Virtually Every Production App”