.webp "Arena-Hard-Auto : Advancing LLM Evaluation With Style Control Integration")
.webp "How To Install/Run – Streamlining OSINT Workflows For Enhanced Capabilities")
Uscrapper 2.0 – Unleashing The Power Of OSINT Web Scraping For Data Extraction
.webp "Uscrapper 2.0 – Unleashing The Power Of OSINT Web Scraping For Data Extraction")
Introducing Uscrapper 2.0, A powerfull OSINT webscrapper that allows users to extract various personal information from a website. It leverages web scraping techniques and regular expressions to extract email addresses, social media links, author names, geolocations, phone numbers, and usernames from both hyperlinked and non-hyperlinked sources on the webpage, supports multithreading to make this process faster, Uscrapper 2.0 is...
GSSAPI-Abuse : Leveraging Kerberos Stacks For Authentication Abuse
.webp "GSSAPI-Abuse : Leveraging Kerberos Stacks For Authentication Abuse")
gssapi-abuse was released as part of my DEF CON 31 talk. A full write up on the abuse vector can be found here: A Broken Marriage: Abusing Mixed Vendor Kerberos Stacks The tool has two features. The first is the ability to enumerate non Windows hosts that are joined to Active Directory that offer GSSAPI authentication over SSH. The second feature is...
DllNotificationInjection – Exploring A Novel Threadless Process Injection Technique
DllNotificationInection is a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. An accompanying blog post with more details is available here How It Works? DllNotificationInection works by creating a new LDR_DLL_NOTIFICATION_ENTRY in the remote process. It inserts it manually into the remote LdrpDllNotificationList by patching of the List.Flink of the list head and...
httpAlive – URL Analysis Tool For Web Application Penetration Test
.webp "httpAlive – URL Analysis Tool For Web Application Penetration Test")
Discover 'httpAlive,' a powerful URL analysis tool designed for web application penetration testing. With features like user-agent rotation, multithreading, and colorized output, this versatile tool efficiently probes for alive subdomains and URLs. In this article, we'll explore its capabilities, installation, and usage, empowering you with a valuable asset for enhancing your web application security assessments. Overview The "httpAlive" tool is designed...
DDoS Scripts – Supercharging Your Kali Linux With Hacking Tools
.webp "DDoS Scripts – Supercharging Your Kali Linux With Hacking Tools")
Explore the world of DDoS scripts and hacking tools to enhance your Kali Linux experience. In this comprehensive guide, we dive into the latest updates and additions, such as Nvidia GPU drivers, Arc themes, and essential security tools. Discover how to supercharge your Kali Linux system and stay at the forefront of cybersecurity. All things to do after installing...
katoolin – Streamline Your Kali Linux Tool Installation With This Comprehensive Guide
.webp "katoolin – Streamline Your Kali Linux Tool Installation With This Comprehensive Guide")
katoolin is a powerful tool that simplifies the installation of Kali Linux tools on compatible systems. With the ability to add or remove Kali Linux repositories and effortlessly install a wide range of security tools, katoolin streamlines the process, making it accessible even for those new to Kali Linux. In this guide, we will explore the features, installation, and...
PwnDoc – Streamlining Pentest Reporting For Efficient Vulnerability Management
.webp "PwnDoc – Streamlining Pentest Reporting For Efficient Vulnerability Management")
PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report.The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Vulnerabilities Audits Templating Features Multiple Language support Multiple Data support Great Customization Manage reusable Audit and Vulnerability Data Create Custom Sections Add custom fields to Vulnerabilities Vulnerabilities Management Multi-User reporting Docx Report Generation Docx Template...
Bypass Fuzzer – Exploring A Powerful Tool For Testing End Point Security
.webp "Bypass Fuzzer – Exploring A Powerful Tool For Testing End Point Security")
This tool performs various checks via headers, path normalization, verbs, etc. to attempt to bypass ACL's or URL validation. It will output the response codes and length for each request, in a nicely organized, color coded way so things are reaable. I implemented a "Smart Filter" that lets you mute responses that look the same after a certain number of times. You...
SSH3 – Faster And Rich Secure Shell Using HTTP/3
.webp "SSH3 – Faster And Rich Secure Shell Using HTTP/3")
SSH3 is a complete revisit of the SSH protocol, mapping its semantics on top of the HTTP mechanisms. In a nutshell, SSH3 uses QUIC+TLS1.3 for secure channel establishment and the HTTP Authorization mechanisms for user authentication. Among others, SSH3 allows the following improvements: Significantly faster session establishment New HTTP authentication methods such as OAuth 2.0 and OpenID Connect in addition to classical SSH authentication Robustness to port scanning attacks: your...
EasyEASM : Your Zero-Dollar Solution For Attack Surface Management
Easy EASM is just that... the easiest to set-up tool to give your organization visibility into its external facing assets. The industry is dominated by $30k vendors selling "Attack Surface Management," but OG bug bounty hunters and red teamers know the truth. External ASM was born out of the bug bounty scene. Most of these $30k vendors use this open-source...
