Domain Coverage Analysis Tool Tool for analyzing domain security based on various data sources: LDAP domain dump NTDS.dit dump Hashcat output List modules uv run main.py -l Available modules: – reversible_encryption – passwords_reuse –...
The post Coverage: A Python-based tool for analyzing Active Directory security appeared first on Penetration Testing Tools.
A lightweight, ergonomic framework for building bug bounty-ready Cybersecurity AIs (CAIs). Why CAI? The cybersecurity landscape is undergoing a dramatic transformation as AI becomes increasingly integrated into security operations. We predict that by 2028, AI-powered...
The post Cybersecurity AI: An open Bug Bounty-ready Artificial Intelligence appeared first on Penetration Testing Tools.
Experts at SentinelOne have reported the discovery of new traces of activity linked to the ZuRu malware, which specifically targets macOS users. Its primary method of distribution is the impersonation of popular macOS applications—most...
The post ZuRu Malware: New Wave of Attacks Targets macOS Users via Fake Apps appeared first on Penetration Testing Tools.
DeviceCodePhishing This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow as soon as the victim opens the phishing link and instantly redirects them to the...
The post DeviceCodePhishing: A New Automated Tool Bypasses MFA & FIDO for Azure Entra Users appeared first on Penetration Testing Tools.
Activision has disabled the Microsoft Store version of Call of Duty: WWII after hackers began exploiting a critical vulnerability that enabled remote access to players’ computers. The affected users were those who installed the...
The post Call of Duty: WWII Pulled from Microsoft Store Due to Critical RCE Hack appeared first on Penetration Testing Tools.
A Russian blockchain developer has fallen victim to a targeted attack executed through a counterfeit extension within the Cursor AI environment, resulting in the theft of approximately $500,000 worth of cryptocurrency. The incident was...
The post $500,000 Crypto Stolen: Fake AI Extension Targets Blockchain Devs via Open VSX appeared first on Penetration Testing Tools.
AMD has disclosed the discovery of a new class of processor vulnerabilities, dubbed Transient Scheduler Attacks (TSA). These attacks exploit speculative side channels arising from specific microarchitectural conditions, potentially leading to the leakage of...
The post AMD Discloses Vulnerabilities: New Processor Flaws Leak Sensitive Data via Speculative Side Channels appeared first on Penetration Testing Tools.
The discovery of a new vulnerability, aptly named Opossum, has cast a shadow over the reliability of secure communications relying on the Transport Layer Security (TLS) protocol. This exploit enables malicious actors to inject...
The post Opossum Attack: New TLS Flaw Injects Malicious Data Into Encrypted Sessions appeared first on Penetration Testing Tools.
The stable release of Suricata 8.0 has officially been unveiled—a powerful open-source intrusion detection and network traffic analysis system developed by the OISF foundation. This marks the first major update in two years since...
The post Suricata 8.0 Unleashed: Faster, Safer Network Defense with Rust & New Protocols appeared first on Penetration Testing Tools.
ChatGPT has once again proven susceptible to unconventional manipulation—this time, the model divulged valid Windows product keys, including one registered to the major financial institution Wells Fargo. The vulnerability was exposed through a peculiar...
The post ChatGPT Leaks Windows Keys, Including Wells Fargo License, Via Clever “Game” Prompt appeared first on Penetration Testing Tools.
Experts at Palo Alto Networks Unit 42 have uncovered a new malicious campaign orchestrated by the threat actor group known as Gold Melody. This group specializes in gaining unauthorized access to corporate systems and...
The post Gold Melody Unleashed: New Stealthy Attacks Exploit Leaked ASP.NET Keys appeared first on Penetration Testing Tools.
On the morning of July 9, the decentralized exchange GMX fell victim to a major cyber heist. An unidentified attacker siphoned off over $40 million worth of cryptocurrency from the platform. According to GMX...
The post GMX Hacked: $40M Stolen in Major DeFi Cyber Heist appeared first on Penetration Testing Tools.
Google has introduced a new security configuration on Android, tailored for users vulnerable to targeted cyberattacks. Known as Advanced Protection, this suite of features—once exclusive to individual Google Accounts—is now available at the device...
The post Android & Chrome Level Up Security with New Advanced Protection for High-Risk Users appeared first on Penetration Testing Tools.
Microsoft is preparing a significant update for users of its Authenticator app on iOS devices. Beginning in September, a new backup system will roll out, eliminating the need to sign in with a personal...
The post Microsoft Authenticator for iOS: Cloud Backups Arrive, Ditching Personal Accounts appeared first on Penetration Testing Tools.
Microsoft has introduced a long-anticipated feature in Windows 11 that allows administrators to remove preinstalled Microsoft Store applications via official Group Policy. The new functionality, titled Remove Default Microsoft Store Packages, is already available...
The post Windows 11 Gets Native App Removal: Bye-Bye Bloatware via Group Policy appeared first on Penetration Testing Tools.
A researcher at Positive Technologies has uncovered a critical vulnerability in the implementation of the NTFS file system, which enables a local attacker to escalate privileges to SYSTEM by leveraging a specially crafted virtual...
The post Critical NTFS Vulnerability (CVE-2025-49689) Uncovered: Local Attacker Can Gain SYSTEM Privileges in Windows 11 appeared first on Penetration Testing Tools.
An attack on the Visual Studio Code extension known as Ethcode has compromised the security of more than 6,000 developers worldwide. The incident stemmed from the insertion of malicious code into this widely used...
The post Ethcode Compromised: Over 6,000 Devs Hit by Malicious VS Code Extension appeared first on Penetration Testing Tools.
Microsoft has just released Windows 11 Beta Build 22631.5696 (KB5062663) to address several known system issues. These fixes are expected to arrive later this month as part of an optional update for the stable...
The post Windows 11 Beta Build 22631.5696: Critical Fixes for ReFS & Printing appeared first on Penetration Testing Tools.
GPOHound is a tool for dumping and analysing Group Policy Objects (GPOs) extracted from the SYSVOL share. It provides a structured, formalized format to help uncover misconfigurations, insecure settings, and privilege escalation paths in...
The post GPOHound: Offensive GPO dumping and analysis tool appeared first on Penetration Testing Tools.
Apache Tomcat webshell application for RCE A webshell application and interactive shell for pentesting Apache Tomcat servers. Features Webshell plugin for Apache Tomcat. Execute system commands via an API with ?action=exec. Download files from the...
The post Apache Tomcat webshell application for RCE appeared first on Penetration Testing Tools.
