A group of hackers orchestrated a meticulously planned campaign targeting Gmail users, successfully bypassing two-factor authentication and gaining unauthorized access to their accounts. The operation was aimed at prominent experts in international security and...
The post Russian APT UNC6293 Exploits Google App Passwords to Bypass 2FA, Hacks Prominent Critics appeared first on Penetration Testing Tools.
The announcement of the so-called “mother of all breaches” sent shockwaves through the media: headlines blared dire warnings, while the tone of coverage bordered on panic. Yet the actual substance of the event is...
The post “Mother of All Breaches” Debunked: 16 Billion Passwords Are an Aggregation of Old Leaks, Not New Hacks appeared first on Penetration Testing Tools.
At first glance, WormGPT appears to be a formidable tool in the arsenal of cybercriminals—powerful, unregulated, capable of generating malicious code, phishing emails, and instructions for circumventing security systems. However, a recent investigation by...
The post WormGPT Exposed: “Advanced” Hacking AI is Just Repackaged Grok & Mixtral appeared first on Penetration Testing Tools.
On April 6, 2025, security researcher Bob Diachenko, in collaboration with analysts from the Cybernews team, discovered an unprotected Elasticsearch server belonging to Openprovider. This incident resulted in the inadvertent exposure of critically sensitive...
The post Openprovider Suffers Massive Data Leak: Elasticsearch Server Exposed 164GB of Domain & Customer Data for 3 Months appeared first on Penetration Testing Tools.
Many owners of Smart TV operating systems increasingly find themselves at the heart of a growing conflict—one that pits the preservation of viewer privacy against mounting pressure from the advertising industry. The crux of...
The post Smart TVs: The Battle for Your Privacy Rages as Manufacturers Prioritize Ads Over Viewers appeared first on Penetration Testing Tools.
Iranian hackers are breaching home surveillance cameras to monitor the movements of Israeli citizens in real time, according to Rafael Franco, former Deputy Director of Israel’s National Cyber Directorate. He stated that in recent...
The post Iran Hacking Israeli Home Cams: Real-Time Monitoring of Citizens & Missile Strikes Revealed appeared first on Penetration Testing Tools.
Fraudsters have developed a method to intercept search queries from users seeking 24/7 customer support from companies such as Apple, Bank of America, Facebook, HP, Microsoft, Netflix, and PayPal. By posing as legitimate support...
The post Warning: New “Search Poisoning” Scam Injects Fake Support Numbers on Legitimate Brand Sites appeared first on Penetration Testing Tools.
A dispute has arisen within the Linux kernel development community over recent modifications proposed for the Bcachefs file system. These changes were submitted after the official feature merge window for the 6.16 release had...
The post Linux Kernel Filesystem Feud: Torvalds Rejects Bcachefs Feature, Citing Merge Window Rules appeared first on Penetration Testing Tools.
Less than four months remain until the end of support for Windows 10, prompting companies across Europe to actively replace their aging, yet still serviceable desktop computers in anticipation of transitioning to Microsoft’s next-generation...
The post Windows 10 End-of-Life Fuels European PC Upgrade Boom Ahead of October Deadline appeared first on Penetration Testing Tools.
FirmwareDroid is a research project that aims to develop novel methods to analyse Android firmware. It is mainly made to automate the process of extracting and scanning pre-installed Android apps for security research purposes....
The post FirmwareDroid: An analysis framework for Android firmware and Apps. appeared first on Penetration Testing Tools.
Fofa Viewer A simple FOFA client written in JavaFX Features Support tabs Feature-rich Context Menu on items Export query result into Excel spreadsheet Manually set max query count pre-query for non-premium users (Change the...
The post Fofa Viewer: simple FOFA (cyberspace search engine) client appeared first on Penetration Testing Tools.
WiFi Exploitation Framework This tool is designed for security researchers and penetration testers to analyze and exploit vulnerabilities in Wi-Fi networks. It provides an intuitive interface with a wide range of automated and manual...
The post WEF: Wi-Fi Exploitation Framework appeared first on Penetration Testing Tools.
peeko is a browser-based XSS-powered C2 (Command and Control) tool that leverages the victim’s browser as a stealthy proxy inside internal networks. Through an injected XSS payload, peeko establishes a WebSocket connection to a central...
The post peeko: Browser-based XSS C2 for stealthy internal network exploration via infected browser appeared first on Penetration Testing Tools.
ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients. Features MCP Server + Ghidra Plugin Decompile and...
The post GhidraMCP: Revolutionizing Reverse Engineering by Connecting Ghidra to LLMs appeared first on Penetration Testing Tools.
chain-bench Chain-bench is an open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark. The auditing focuses on the entire SDLC process, where...
The post chain-bench: auditing your software supply chain stack for security compliance appeared first on Penetration Testing Tools.
Nali An offline tool for querying IP geographic information and CDN provider. Inspired by the Nali C version and nali-cli js version. I want to query the IP geographic information and CDN service provider...
The post Nali: offline tool for querying IP geographic information and CDN provider appeared first on Penetration Testing Tools.
Varalyze is a threat intelligence tool suite that combines a diverse range of web-based applications into one seamless platform through the use of APIs and python libraries. This allows for comprehensive security event triaging due...
The post Varalyze: The All-in-One Threat Intelligence Suite Revolutionizing Security Triage appeared first on Penetration Testing Tools.
Kereva LLM Code Scanner is a static analysis tool designed to identify potential security risks, performance issues, and vulnerabilities in Python codebases that use Large Language Models (LLMs). It analyzes your code without execution...
The post Kereva: Static analysis for LLM-powered Python applications appeared first on Penetration Testing Tools.
Docker for Pentesters Docker containerization is the most powerful technology in the current market so I came up with the idea to develop Docker images for Pentesters. Nightingale contains all the required well-known tools...
The post Nightingale: A comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment appeared first on Penetration Testing Tools.
BinSync is a decompiler collaboration tool built on the Git versioning system to enable fined-grained reverse engineering collaboration regardless of decompiler. BinSync is built by mahaloz, the angr team, and the SEFCOM research lab. It’s also due in large...
The post BinSync: Revolutionizing Reverse Engineering with Git-Based Decompiler Collaboration appeared first on Penetration Testing Tools.
