Open-source
If you’ve been into car hacking or automotive security research, you might have heard of CANghost, the original toolkit that made playing with CAN buses a bit easier for those of us looking under the hood of modern vehicles. What is Carpunk? Well, now there’s something new: Carpunk
network
In today’s fast-evolving world of cybersecurity, success isn’t just about what you know—it’s about the tools you use. For pentesters and security engineers, having the right tools can make all the difference between uncovering hidden vulnerabilities and missing critical risks. That’s where open-source tools come
Healthcare
Data breaches are a nightmare for hospitals — and unfortunately, they are becoming a regular occurrence. Sensitive patient data like medical records, financial information, and even treatment histories are all at risk. You might think healthcare providers are doing everything possible to secure this information. But here's the kicker:
Cybersecurity
Disclaimer: This article is intended for ethical hackers, cybersecurity professionals, and individuals interested in security research. All tools mentioned here are intended for legitimate use only. Unauthorized or malicious use of these tools is illegal and unethical. Always ensure you have the proper authorization before conducting any penetration testing or
RaspberryPi
The Raspberry Pi is a versatile, portable single-board computer (SBC) that can be used for almost anything—from building your own CCTV surveillance system or music streaming server to retro gaming consoles or even a private VPN to maintain your privacy. Even a Door intercome system, yes you can do
RaspberryPi
This open-source project/ guide enables anyone to transform Raspberry Pi into a standalone pocket-sized penetration testing device that can be used to pentest/ hack IoT devices, networks, and more. It include all the including components that you need to run a pocket-size Kali Linux device for pentesting anything. Features * Raspberry
pentesting
APK Testing: The Frontline of Android Security
pentesting
Unveiling the Power of Code Analysis in Penetration Testing Cracking the Code: Static vs. Dynamic Analysis for Aspiring Security Pros
privacy
Imagine you're at a fancy restaurant. You don't talk directly to the chefs in the kitchen, right? Instead, there's a waiter who takes your order, delivers it to the kitchen, and brings back your food. That waiter is like a reverse proxy in the
Cybersecurity
Vuls is an open-source, agentless vulnerability scanner designed to help administrators and security professionals, like pentesters, keep their systems secure. It’s written in Go, known for its lightweight and high-performance capabilities. Vuls provides a proactive way to detect vulnerabilities without needing to install any agents on the target systems,
WordPress
WordPress is a versatile and widely-used content management system (CMS) that powers over 75 million websites worldwide, making it a popular choice for businesses, bloggers, and e-commerce platforms alike. Its user-friendly interface and extensive customization options through themes and plugins have contributed to its immense popularity. However, with great power
web spider
Wapiti is a free and open-source web application vulnerability scanner that enables users to assess the security of their applications, including WordPress sites. It performs security audits by analyzing web applications for vulnerabilities, such as SQL injection, Cross-Site Scripting (XSS), and file disclosure issues. Wapiti works as a "black-box&
Cybersecurity
What is MQTT (Message Queuing Telemetry Transport)? MQTT (Message Queuing Telemetry Transport) is an OASIS standard messaging protocol specifically designed for the Internet of Things (IoT). Its lightweight architecture is perfect for connecting remote devices that have limited resources and minimal network bandwidth. This makes MQTT an ideal choice across
pentesting
PRET is a security testing tool for printers, developed at Ruhr University Bochum. It connects to printers via network or USB and exploits PostScript, PJL, and PCL languages to manipulate print jobs, access the printer’s file system, and potentially cause physical damage. By translating UNIX-like commands into printer language,
Open Source Intelligence (OSINT)
SpiderFoot is an open source intelligence (OSINT) automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based interface but can also be
Cybersecurity
In the ever-evolving landscape of cybersecurity, professionals face an increasing number of threats that require robust solutions. Offensive Security practices play a crucial role in identifying and mitigating vulnerabilities before they can be exploited. Docker, a powerful containerization platform, has emerged as a favorite among cybersecurity experts for its ability
Docker
Is Your Docker Deployment Secure? Docker containers have revolutionized the way applications are deployed and managed, but with great flexibility comes the need for heightened security vigilance. Regularly checking your Docker containers is crucial to ensure they are configured correctly and free from vulnerabilities. Misconfiguration can expose your applications to
Cybersecurity
HuntKit is a collection of [penetration testing, bug bounty hunting, capture the flag, red teaming] tools in a single Docker image. Simply run the image and start using the tools. Its modular architecture allows users to customize their workflows and leverage a range of hunting techniques, enhancing the efficiency of
CCTV
While there are many commercial and open-source CCTV systems available for home and business security, many people are unaware that these systems also require security testing. This is crucial to ensure that no unauthorized users have logged in or are accessing unsecured CCTV camera feeds. Best 20 Free Open-source CCTV,
Self-hosted
Sn1per is a free powerful open-source reconnaissance tool designed for penetration testing. It automates the process of gathering information about a target, helping security professionals identify vulnerabilities. With an array of features, Sn1per enhances your ability to perform comprehensive assessments effectively. It comes with two editions, an open-source free edition
WordPress
WordPress powers over 40% of all websites on the internet, making it a popular target for hackers. Failing to upgrade your WordPress installation and regularly check for security bugs in included packages is not just a risky move; it's a bad practice that can lead to severe security
Cybersecurity
WhatWeb is a web technology identification and scanner tool that answers the question, "What is that Website?" It recognizes over 1800 web technologies, including CMS, analytics packages, and JavaScript libraries. WhatWeb operates with adjustable aggression levels, allowing users to balance speed and reliability. The default 'stealthy'
Cybersecurity
CCTV video analysis tool built completely in python.
Vulnerability Scanner
Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities It is written in Python and uses some Perl, Ruby and PHP scripts. It includes a variety