Collaborate Disseminate
Google is ramping up its campaign against HTTP only sites and is going to mark ALL Non-HTTPS sites insecure in July 2018 with the release of Chrome 68. It’s a pretty strong move, but Google and the Internet, in general, has been moving in this directio… Continue reading Google Chrome Marking ALL Non-HTTPS Sites Insecure July 2018
Altdns is a Subdomain Recon Tool in Python that allows for the discovery of subdomains that conform to patterns. The tool takes in words that could be present in subdomains under a domain (such as test, dev, staging) as well as takes in a list of subdo… Continue reading altdns – Subdomain Recon Tool With Permutation Generation
So another 0-Day Flash Vulnerability is being exploited in the Wild, a previously unknown flaw which has been labelled CVE-2018-4878 and it affects 28.0.0.137 and earlier versions for both Windows and Mac (the desktop runtime) and for basically everyth… Continue reading 0-Day Flash Vulnerability Exploited In The Wild
dorkbot is a modular command-line tool for Google dorking, which is performing vulnerability scans against a set of web pages returned by Google search queries in a given Google Custom Search Engine.
How dorkbot works
It is broken up into two sets of … Continue reading dorkbot – Command-Line Tool For Google Dorking
USBPcap is an open-source USB Packet Capture tool for Windows that can be used together with Wireshark in order to analyse USB traffic without using a Virtual Machine.
Currently, the live capture can be done on “standard input” capture basis: you writ… Continue reading USBPcap – USB Packet Capture For Windows
OWASP ZSC is an open source obfuscated code generator tool in Python which lets you generate customized shellcodes and convert scripts to an obfuscated script.
Shellcodes are small codes in Assembly language which could be used as the payload in softw… Continue reading OWASP ZSC – Obfuscated Code Generator Tool
So here we are in 2018, taking a look back at 2017, quite a year it was. We somehow forgot to do this last year so just have the 2015 summary and the 2014 summary but no 2016 edition.
2017 News Stories
All kinds of things happened in 2017 starting wit… Continue reading A Look Back At 2017 – Tools & News Highlights
Spectre & Meltdown Checker is a simple shell script to tell if your Linux installation is vulnerable against the 3 “speculative execution” CVEs that were made public early 2018.
Without options, it’ll inspect you currently running kernel. You can … Continue reading Spectre & Meltdown Checker – Vulnerability Mitigation Tool For Linux
Hijacker is a native GUI which provides Reaver for Android along with Aircrack-ng, Airodump-ng and MDK3 making it a powerful Wifi hacker app.
It offers a simple and easy UI to use these tools without typing commands in a console and copy & pasting… Continue reading Hijacker – Reaver For Android Wifi Hacker App
Sublist3r is a Python-based tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting.
It also integrates with subbrute for subdomain bru… Continue reading Sublist3r – Fast Python Subdomain Enumeration Tool