Subdominator – Unleash The Power Of Subdomain Enumeration
Subdominator is a lightweight and fast tool designed for passive subdomain enumeration, primarily used in bug hunting and reconnaissance processes. Developed by RevoltSecurities, it helps cybersecurity professionals and researchers identify potential security vulnerabilities by efficiently enumerating subdomains using various free passive resources. Key Features Of Subdominator Speed and Efficiency: Subdominator is designed to be fast and powerful, making it ideal for...
Doing The Due Diligence : Analyzing The Next.js Middleware Bypass (CVE-2025-29927)
A critical vulnerability, CVE-2025-29927, has recently been identified in the Next.js ecosystem, allowing attackers to bypass authentication mechanisms implemented at the middleware layer. This vulnerability has caused significant concern among developers and security researchers, as it can lead to unauthorized access, Content Security Policy (CSP) bypasses, and even Denial of Service (DoS) attacks via cache poisoning. Affected Versions And Remediation The...
Awesome-Redteam : A Comprehensive Guide To Advanced Red Teaming Tools And Techniques
The Awesome-Redteam repository is a comprehensive collection of tools and resources designed for red teaming and offensive security. It provides a structured approach to various aspects of cybersecurity, including reconnaissance, vulnerability research, exploitation, and post-exploitation techniques. This article will delve into the functionalities of the tools and resources available within the Awesome-Redteam project. Key Components Of Awesome-Redteam 1. CheatSheets Functionality: The project...
ByDeF : Mastering The Art Of Antivirus Evasion For Penetration Testing
ByDeF is a tool designed to generate an undetectable Portable Executable (PE) file, specifically a .exe file, that can bypass Windows Defender and other antivirus software. This tool is particularly useful for penetration testers and security researchers who need to create payloads that evade detection by modern antivirus systems. Functionality Of ByDeF ByDeF operates through a series of steps that involve...
CVE-2025-29927 : Next.js Middleware Authorization Bypass – Technical Analysis
A critical vulnerability, CVE-2025-29927, has been identified in Next.js, a React-based web framework by Vercel. This flaw allows attackers to bypass middleware-based authorization checks by exploiting the x-middleware-subrequest header. Middleware in Next.js is widely used for tasks such as path rewriting, server-side redirects, security headers (e.g., CSP), and access control. The vulnerability affects versions 11.1.4 through 13.5.6, 14.x before...
pugDNS : Revolutionizing DNS Query Speed And Accuracy For Advanced Networking Needs
pugDNS is an experimental, high-performance DNS query tool designed to facilitate fast and accurate bulk DNS lookups. It leverages AF_XDP (Address Family eXpress Data Path) sockets to achieve significantly higher query rates compared to traditional DNS tools. This makes it particularly useful for security researchers, network administrators, and penetration testers involved in DNS reconnaissance and domain discovery tasks. Key Features High...
ZeroDays CTF 2025 : A Comprehensive Overview
The ZeroDays CTF 2025, held on March 22nd at Croke Park in Dublin, Ireland, marks a significant milestone as it celebrates its 10th anniversary. This event has evolved into the largest on-site, one-day Capture The Flag (CTF) competition globally, attracting over 130 teams in 2024. The competition is structured into several categories, including Irish Colleges, International, and Open sections,...
CloudPEASS : Cloud Privilege Escalation Awesome Script Suite
CloudPEASS is a suite of tools designed to help users identify potential privilege escalation paths and other security vulnerabilities in cloud environments, specifically Azure, GCP, and AWS. The suite is currently in development and leverages techniques documented in HackTricks Cloud, along with insights from HackTricks AI, to analyze permissions and highlight potential attacks. AzurePEASS Functionality: Permission Analysis: AzurePEASS checks all permissions in...
OSCE³ and OSEE Study Guide : Understanding Key Tools And Functions
The OSCE³ (Offensive Security Certified Expert 3) and OSEE (Offensive Security Exploitation Expert) certifications are advanced qualifications in the field of cybersecurity, focusing on web security and exploit development, respectively. Both certifications require a deep understanding of various tools and methodologies used in penetration testing and exploit development. OSCE³ Study Guide OSCE³ focuses on web security, emphasizing tools and techniques for...
Nyxian : A Low-Level Scripting Language For iOS
Nyxian is a JavaScript-based low-level scripting language designed specifically for iOS. It provides a powerful toolset for developers to interact with iOS systems at a deeper level, allowing for more control and customization. This article will explore the core functionality and modules of Nyxian, providing an overview of its capabilities and potential applications. To get started with Nyxian, users need...
