spraycharles Low and slow password spraying tool, designed to spray on an interval over a long period of time. Includes spraying plugins for Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonciwall, NTLM over HTTP, and SMB. Associated blog post by @sprocket_ed covering NTLM over HTTP,...
The post spraycharles: Low and slow password spraying tool appeared first on Penetration Testing Tools.
Dell has officially confirmed a cybersecurity breach and subsequent data leak within its IT environment, while emphasizing that the compromised files hold no real value. According to the company, the leaked data primarily consists...
The post Dell Confirms Cybersecurity Breach: WorldLeaks Claims 1.3TB Data Exfil, But Dell Says “No Real Value” appeared first on Penetration Testing Tools.
Google has released the findings of its investigations into coordinated influence operations conducted across its platforms during the second quarter of 2025. In total, more than 11,000 accounts and assets were removed, including 10,910...
The post Google Removes 11,000+ Accounts in Q2 2025 Crackdown on Coordinated Influence Operations appeared first on Penetration Testing Tools.
PyWhisker pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C#. This tool allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It’s...
The post pywhisker: Python tool for Shadow Credentials attacks appeared first on Penetration Testing Tools.
Microsoft has unveiled an enhanced data migration feature designed to ease the transition for users moving from Windows 10, whose official support will end in less than three months. This new tool enables the...
The post Windows 11 Introduces New PC-to-PC Migration Tool for Easier Upgrades appeared first on Penetration Testing Tools.
Amid the relentless surge of digital threats, companies across the globe find themselves under a barrage of cyberattacks. According to the latest data from Check Point Research, each organization now endures an average of...
The post Global Cyberattacks Surge 143% in Four Years: Check Point Reveals Escalating Threat Landscape appeared first on Penetration Testing Tools.
Cybercriminals are mastering increasingly sophisticated methods of delivering malicious code, leveraging unconventional file formats to evade security defenses. A recent case documented by researchers illustrates how a seemingly innocuous audio message in WAV format...
The post Warning: Stealthy WAV Malware Disguised as Voicemail Targets Users, Bypassing Email Filters appeared first on Penetration Testing Tools.
ExpressVPN has resolved a vulnerability in its Windows client that allowed Remote Desktop Protocol (RDP) connections to bypass the VPN tunnel, thereby exposing users’ real IP addresses. The issue affected versions 12.97 through 12.101.0.2-beta...
The post ExpressVPN Fixes RDP Leak: Real IP Addresses Exposed Due to Debugging Code Oversight appeared first on Penetration Testing Tools.
This past weekend, Indian cryptocurrency platform CoinDCX suffered a large-scale cyberattack, resulting in the theft of over $44 million in digital assets. The breach affected only the company’s internal operational account, with user funds...
The post CoinDCX Hacked for $44 Million in Crypto: Internal Account Breached, User Funds Safe appeared first on Penetration Testing Tools.
The Chinese cyber group known as SilverFox, active since June 2023, has launched one of the most expansive malware distribution campaigns targeting Windows to date. Focusing on Chinese-speaking users worldwide—including business professionals operating outside...
The post SilverFox Unleashes Massive Malware Campaign: 2,800+ Domains Target Chinese-Speaking Users Worldwide appeared first on Penetration Testing Tools.
An eBPF agent that captures traffic flowing through the Linux kernel. By attaching to TLS/SSL functions, data is intercepted before and after encryption and then passed to flexible plugins with full visibility along with...
The post Qtap: See Through Encrypted Linux Traffic with eBPF for Unparalleled Observability and Security Auditing appeared first on Penetration Testing Tools.
Over the past several months, researchers at Cyble Research and Intelligence Labs (CRIL) have been closely monitoring a large-scale and technically sophisticated phishing campaign known as Scanception. Its hallmark lies in the use of...
The post Scanception: New QR Code Phishing Campaign Bypasses Security to Harvest Credentials on Mobile appeared first on Penetration Testing Tools.
Pavel Durov, the founder of Telegram, has issued a warning about a new wave of extortion emerging within the platform. The scheme involves fraudsters demanding that users surrender valuable digital assets—rare Telegram gifts, premium...
The post Pavel Durov Warns: New Extortion Wave Targets Telegram Users for Digital Assets appeared first on Penetration Testing Tools.
The China-linked cyber-espionage group APT41 has launched a new surveillance campaign targeting government IT services in Africa—an unexpected turn for a region previously considered an unlikely target. Researchers at Kaspersky Lab uncovered the operation...
The post APT41’s New Frontier: Chinese Cyberespionage Group Targets African Governments appeared first on Penetration Testing Tools.
Cybersecurity specialists at cside have uncovered a vast and covert cryptocurrency mining campaign that has compromised over 3,500 websites—marking the largest incident of its kind in recent years and signaling the resurgence of tactics...
The post Silent Scourge: Over 3,500 Websites Infected by New Covert Browser Cryptominer appeared first on Penetration Testing Tools.
Turkish cybersecurity experts at Malwation have uncovered a large-scale phishing campaign targeting enterprises in the defense and aerospace sectors. Threat actors are disguising malicious attachments as official documents purportedly issued by TUSAŞ, Turkey’s state-owned...
The post Snake Keylogger Strikes Turkish Aerospace & Defense, Evades Detection with Stealthy Tactics appeared first on Penetration Testing Tools.
Cyber espionage in Asia is intensifying: researchers at Seqrite Labs have unveiled new insights into the operations of the group UNG0002, also known as Unknown Group 0002. This obscure yet technically adept entity is...
The post UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Broad Cyberespionage Campaigns Across Asia appeared first on Penetration Testing Tools.
AI-powered programming tools are rapidly gaining popularity, and one of the most prominent—Cursor—has introduced a new YOLO mode (short for “you only live once”) that enables its agent to execute complex sequences of actions...
The post Cursor AI’s “YOLO Mode” Exposed: Security Firm Warns of Easy Bypasses, Data Deletion, and RCE Risks appeared first on Penetration Testing Tools.
Following a wave of criticism sparked by a recent ProPublica report alleging that Microsoft had engaged engineers based in China to support cloud systems tied to the U.S. Department of Defense, the company has...
The post Microsoft Halts China-Based Support for US DoD Cloud After ProPublica Expose & Pentagon Backlash appeared first on Penetration Testing Tools.
Apple has announced that, effective immediately, users in South Korea can add the widely used Tmoney transit card to their Apple Wallet. With this integration, commuters can effortlessly ride subways, buses, and other public...
The post Apple Wallet Now Supports Tmoney: South Korea Commuters Tap to Pay with iPhone & Apple Watch appeared first on Penetration Testing Tools.
