Top 10 SaaS Security Checklist in 2023

Software as a Service (SaaS) security refers to the measures and practices employed to protect SaaS solutions’ data, applications, and infrastructure. SaaS is a cloud computing model where software applications are hosted and delivered over the i…

September 12, 2023
Read More >>

Moniorg – Passive Monitoring via Certificate Transparency

Description Moniorg is a cutting-edge tool that uses Certificate Transparency logs to let you keep an eye on things without being noticed. With this tool, security experts can keep track of new names that are linked to an organization’s SSL certificates. This gives them a unique look into the organization’s infrastructure. By using the power […]

September 12, 2023
Read More >>

HTTP-Shell: Multiplatform Reverse Connection Tool

HTTP-Shell is a multiplatform reverse shell. This tool helps you obtain a shell-like interface on a reverse connection over HTTP. Unlike other reverse shells, the main goal of the tool is to be used in conjunction with Microsoft Dev Tunnels in order to get a connection as close as possible to a legitimate one. This shell […]

September 12, 2023
Read More >>

WhatsApp’s Task Hijacking Bug Explained

Around a year ago, I discovered a long-standing vulnerability in WhatsApp and other popular Android applications. Despite its existence for years, this vulnerability remained largely theoretical. To demonstrate its real-world impact, I successfully exploited it on WhatsApp, Facebook, and Facebook Lite. I promptly reported my findings to Facebook’s White Hat program. In this post, I’ll share […]

September 11, 2023
Read More >>

Domain Audit – Automated Active Directory Penetration Testing

The Tool is a wrapper around PowerView, Impacket, PowerUpSQL, BloodHound, Ldaprelayscan and Crackmapexec to automate the execution of enumeration and a lot of checks performed during a On-Prem Active Directory Penetration test. Thanks to all the authors of the original tools. Installation AND Setup Make sure the path viariables in the script to the following […]

September 11, 2023
Read More >>

Naabu – Fast and Efficient Port Scanner

Naabu is a powerful port scanning utility designed in the Go programming language, enabling fast and efficient port enumeration. Designed to swiftly detect valid ports on various hosts, this tool is optimized to perform SYN, CONNECT, and UDP scans. With its comprehensive feature set, Naabu not only lists ports that offer a reply but is […]

September 11, 2023
Read More >>

Scan4All: A Next-Gen Automated Vulnerability Detection Security Tool

Scan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis. Built on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features More references: config/doNmapScan.sh By default, naabu is used to complete port […]

September 8, 2023
Read More >>

CatSniffer – The Ultimate Multiprotocol IoT Attack Tool in USB Form

CatSniffer is an original multiprotocol, and multiband board made for sniffing, communicating, and attacking IoT (Internet of Things) devices. It was designed as a highly portable USB stick that integrates the new chips TI CC1352, Semtech SX1262, Microchip SAMD21E17 V2 or previous, and RP2040 V3 or later. This board is a Swiss army knife for […]

September 8, 2023
Read More >>