Penetration Testing Tools - Metepreter.org

Another relic of the past is being permanently retired from the legendary operating system. Microsoft has initiated the process of removing PowerShell 2.0—a long-obsolete version of the command-line tool—from Windows 11. This iteration first...

The post Microsoft is Finally Removing PowerShell 2.0 from Windows 11: Boosting Security, Retiring Legacy Tool appeared first on Penetration Testing Tools.

Exercise caution if you’re planning to play Call of Duty: WWII via Game Pass on PC. Users have begun reporting a critical vulnerability that allows hackers to remotely execute commands on another player’s computer....

The post Call of Duty: WWII Game Pass PC Hit by Critical RCE Exploit, Players Warned to Stay Away appeared first on Penetration Testing Tools.

As a result of a data breach caused by TalentHook, tens of millions of job seekers’ resumes were left openly accessible online. The incident was first reported by the Cybernews team, which discovered a...

The post TalentHook Data Breach Exposes 26 Million Job Seekers’ Resumes Via Misconfigured Azure Cloud appeared first on Penetration Testing Tools.

The world of cybersecurity is typically dominated by seasoned professionals with years of experience. Yet, on occasion, the most unexpected discoveries emerge from those who haven’t even reached adulthood. Dylan became the youngest security...

The post Rising Star: Meet Dylan, Microsoft’s Youngest Security Researcher & Bug Bounty Rule Changer at 13 appeared first on Penetration Testing Tools.

Spanish authorities have dismantled a large-scale investment fraud scheme that inflicted losses exceeding $11.8 million (more than €10 million). The coordinated operation was carried out simultaneously in Barcelona, Madrid, Mallorca, and Alicante, resulting in...

The post Spain Busts €10M+ Crypto Fraud Ring: 21 Arrested in Major International Investment Scam appeared first on Penetration Testing Tools.

Experts at Koi Security have identified over 40 malicious extensions for the Mozilla Firefox browser, specifically crafted to steal data from cryptocurrency wallets. These add-ons pose a significant threat to the security of users’...

The post Firefox Crypto Wallet Alert: Over 40 Malicious Extensions Found Stealing Seed Phrases & Funds appeared first on Penetration Testing Tools.

Millions of Linux-based systems across the globe have been exposed to serious risk due to a newly discovered critical vulnerability in the sudo utility—one that enables attackers to gain superuser privileges and seize full...

The post Critical Sudo Flaws (CVE-2025-32463, CVSS 9.3): Root Privilege Escalation Via –chroot & –host Options, PoC Available appeared first on Penetration Testing Tools.

Researchers at the University of North Carolina have developed a novel method for deceiving artificial intelligence systems tasked with image analysis. The technique, dubbed RisingAttacK, can effectively render objects invisible to AI, even when...

The post RisingAttacK: New Method Renders Objects “Invisible” to AI Image Analysis Systems appeared first on Penetration Testing Tools.

The French cybersecurity agency has announced a large-scale cyberattack targeting key sectors of the nation. Government institutions, telecommunications firms, media organizations, the financial sector, and transport entities were all placed in the crosshairs. The...

The post ANSSI Exposes “Houken”: China-Linked APT Exploiting Ivanti CSA Zero-Days & Deploying Linux Rootkits appeared first on Penetration Testing Tools.

DreamWalkers Reflective shellcode loader inspired by MemoryModule and Donut, with advanced call stack spoofing and .NET support. Unlike traditional call stack spoofing, which often fails within reflectively loaded modules due to missing unwind metadata, DreamWalkers introduces a...

The post DreamWalkers: New Reflective Shellcode Loader Spoofs Call Stacks & Supports .NET for EDR Evasion appeared first on Penetration Testing Tools.

Corporate laptops and production servers typically have robust security monitoring in place to reduce risk and meet compliance requirements. However, CI/CD runners, which handle sensitive information like secrets for cloud environments and create production...

The post Harden-Runner: EDR for CI/CD Stops Supply Chain Attacks Cold appeared first on Penetration Testing Tools.

In recent weeks, the Fedora community has found itself at the heart of intense debate, sparked by two proposed changes that could significantly reshape the future of the distribution. Following the release of Fedora...

The post Fedora Delays 32-bit Support End: Community Outcry Saves Gaming & Legacy Apps appeared first on Penetration Testing Tools.

Despite the rapid advancements in chatbot technology, modern AI models still frequently err when asked to identify the official websites of well-known companies. According to researchers at Netcraft, these inaccuracies present fresh opportunities for...

The post AI Chatbots Are Leading Users to Phishing Sites: New Report Reveals Dangerous “AI Search Poisoning” Threat appeared first on Penetration Testing Tools.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning regarding serious threats posed by the application TeleMessage TM SGNL, which had been promoted as a secure alternative to the Signal messenger....

The post CISA Warns: TeleMessage TM SGNL Actively Exploited for Data Leaks, Patch by July 22 appeared first on Penetration Testing Tools.

Experts have uncovered a large-scale fraudulent campaign involving thousands of counterfeit online stores masquerading as renowned global brands, all designed to steal customers’ payment information. The scheme has been active for several months. Cybercriminals...

The post Global E-commerce Fraud Ring Uncovered: Fake Apple, Nordstrom, Brooks Brothers Sites Steal Credit Cards appeared first on Penetration Testing Tools.

Cisco has remedied a critical vulnerability in its Unified Communications Manager (Unified CM), the enterprise telephony management system, which could have granted attackers complete control over affected devices due to a hardcoded superuser account...

The post Urgent Cisco ISE/ISE-PIC Alert: Critical RCE Flaw (CVSS 10.0) Allow Unauthenticated Root Access appeared first on Penetration Testing Tools.

A critical vulnerability has been discovered in the Android spyware app known as Catwatchful, resulting in a significant data breach that compromised the personal information of thousands of users—including the administrator of the service...

The post Catwatchful Spyware Hacked: Critical Flaw Exposes 62,000 User Logins & Victim Data appeared first on Penetration Testing Tools.

A major investigation into large-scale SMS fraud has concluded in London, culminating in the conviction of Chinese student Ruichen Xiong, who has been sentenced to over a year in prison for orchestrating an elaborate smishing...

The post Chinese Student Jailed for Smishing: Operated Covert “SMS Blaster” in Car for Mass Phishing appeared first on Penetration Testing Tools.

A critical vulnerability has been discovered in the popular WordPress plugin Forminator, enabling unauthenticated attackers to arbitrarily delete files from a website. This flaw poses a significant threat, potentially allowing full compromise of targeted...

The post Forminator WordPress Plugin Flaw (CVE-2025-6463, CVSS 8.8): Unauthenticated Arbitrary File Deletion Leads to Site Takeover appeared first on Penetration Testing Tools.

Fully automated MCP server built on top of apktool to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, parse manifests, and reverse engineer effortlessly. apktool-mcp-server is a MCP server for the Apk Tool that integrates...

The post apktool-mcp-server: Fully Automated MCP Server Analyzes APKs with LLMs Like Claude appeared first on Penetration Testing Tools.