Offensive Security Tool: TerminatorZ
TerminatorZ is an efficient web security tool designed to scan for potential vulnerabilities in your web applications.
Recon Tool: SauronEye
SauronEye is a search tool built to aid red teams in finding files containing specific keywords. Such as passwords and secrets, across multiple network drives and within the contents of files, including Microsoft Office files.
Recon Tool: ScopeHunter
ScopeHunter is a command-line tool for finding in-scope targets for Bug Bounty Hunting programs. It uses the latest databases from HackerOne, BugCrowd, Intigriti, and YesWeHack to give you accurate and up-to-date results.
Offensive Security Tool: XSSRocket
XSSRocket it is a tool designed for Offensive Security and XSS (Cross-Site Scripting) attacks. The tool tracks response codes, marking success and failure, and creates a detailed report of the findings, saving them in a folder named after the domain.
Recon Tool: msprobe
msprobe lets you find all things on-prem Microsoft for password spraying and enumeration. It will use a list of common subdomains associated with your target apex domain to attempt and discover valid instances of on-prem Microsoft solutions.
Recon Tool: Shotlooter
Shotlooter is a tool developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ by applying OCR and image processing methods.
Recent News
Critical GitHub Vulnerability Allowed Remote Code Execution via Single “git push”
Critical nginx-ui Flaw Under Active Exploitation Enables Full Server Takeover
React2Shell Exploited in Mass Credential Harvesting Campaign Targeting 700+ Hosts
EvilTokens Phishing Service Fuels Large-Scale Microsoft 365 Account Takeover Campaign
Attackers Impersonate IT Support on Microsoft Teams to Deploy A0Backdoor Malware
State-Sponsored Attack Hijacks Notepad++ Update Infrastructure to Deliver Malware
Fortinet Fixes Actively Exploited FortiOS SSO Auth Bypass
CISA Flags Actively Exploited VMware vCenter RCE in KEV Catalog
Reprompt Attack Lets Attackers Exfiltrate Data From Microsoft Copilot With a Single Click
Node.js Fixes Critical DoS Flaw That Could Crash “Virtually Every Production App”