Asgard: Full-spectrum toolkit for vulnerability discovery, intelligence collection, post-exploitation, and reporting
https://www.reddit.com/r/Pentesting/comments/1kwx1hz/asgard_fullspectrum_toolkit_for_vulnerability/

<!-- SC_OFF -->🚨 Core Modules (and what they do): Freya – Web app fuzzing with full detection: ✅ XSS, SQLi, SSRF, IDOR, Path Traversal, CRLF, RCE, SSTI, CSRF, Open Redirect, XXE, OAuth misconfigs, Host Header Injection, WebSocket awareness, and Auth Bypass Thor – Recon via full-range Nmap with optional stealth headers Odin – OSINT with subdomain harvesting, GitHub T leaks, and metadata correlation Njord – Cloud audit tool for open S3 buckets and GitHub secret exposure Hel – Tor-powered .onion keyword scraper (runs over SOCKS5) Baldur – CVE discovery from public APIs and live RCE payload testing Heimdall – WAF detection, DNSBL checks, and application defense probing Loki – Post-exploitation module with cron/schtask persistence + SET integration Mimir – Intelligence scoring engine with chain-aware CVSS summaries Norns – Generates AI-written PDF reports with graphs and executive summaries Each module integrates with the others, writes to shared intel.json, and logs its findings. 🤖 Built-in AI Capabilities Interactive REPL (yggdrasil_agent.py) – Natural language control of the framework GPT-enhanced summaries in reports AI-assisted payload mutation, intel fusion, and detection scoring Fully pluggable LLM engine for local/remote GPTs 🧩 Bonus Features Plugin system – drop custom Python modules into /plugins MITRE-style TTP chaining using ttp_orchestrator.py Workspace isolation (/workspaces/) with history tracking Docker support (docker-compose.yml) or simple install via install.sh Output includes .json per module and .pdf for full reports 📥 Download / Source Code GitHub Repo:
🔗 https://github.com/binarymass/TheDivinityProject-Asgard 🧠 Who Is It For? Red teamers and pentesters who want automation without limits Blue teamers validating threat exposure across kill chains CTF teams looking to simulate attacks Offensive security students learning with real tools Anyone building modular, AI-enhanced infosec workflows ⚠️ Disclaimer Asgard is released under the MIT license with an extended legal disclaimer.
It is intended for authorized security testing, research, and education only.
Misuse is your responsibility. <!-- SC_ON --> submitted by /u/BinaryMalice (https://www.reddit.com/user/BinaryMalice)
[link] (https://www.reddit.com/r/Pentesting/comments/1kwx1hz/asgard_fullspectrum_toolkit_for_vulnerability/) [comments] (https://www.reddit.com/r/Pentesting/comments/1kwx1hz/asgard_fullspectrum_toolkit_for_vulnerability/)

Reflected XSS and Blind OS Command Injection
https://osintteam.blog/reflected-xss-and-blind-os-command-injection-a056c75f99be?source=rss------bug_bounty-5

How a Misconfigured Email Parameter Led to Script Injection, Frame Embedding, and Remote DNS-Based OS Command ExecutionContinue reading on OSINT Team » (https://osintteam.blog/reflected-xss-and-blind-os-command-injection-a056c75f99be?source=rss------bug_bounty-5)

Reflected XSS and Blind OS Command Injection

How a Misconfigured Email Parameter Led to Script Injection, Frame Embedding, and Remote DNS-Based OS Command ExecutionContinue reading on OSINT Team »
Read more...

Submitting payloads to virustotal
https://www.reddit.com/r/redteamsec/comments/1kwqc2x/submitting_payloads_to_virustotal/

<!-- SC_OFF -->Was implementing a few loaders so to bypass a specific EDR vendor for initial access and get a beacon connection to my C2. Had been uploading few of the testing payloads to virustotal, but this time i mistakenly uploaded the main payload that i was going to use during the engagement (starts in a couple of days). Is the actual technique (e.g specific injection technique used) burned and do i need to write something new from scratch or could i try modifying the code logic a bit, adding some obsfucation and hopefully the same technique will still work? In other words how long does it for edr vendors to perform behavioral analysis on submitted samples, detect the technique applied and update their products (if thats how it works). Thanks! <!-- SC_ON --> submitted by /u/Full_Roll37 (https://www.reddit.com/user/Full_Roll37)
[link] (http://virustotal.com/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwqc2x/submitting_payloads_to_virustotal/)

Your strategy for hunting 0days
https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/

<!-- SC_OFF -->I recently read the post about this guy finding a 0day using chatgpt o3 model and it's really interesting the way he talks about how he carefully picks the attack surface for the model to analyze, only providing certain handler functions to look for UAF's, up to a limited call depth. It made me wonder how hunting for 0days requires not only a carefully thought out strategy, but it's also probably different for everyone. I''m curious how different vuln researchers approach this? What is your strategy? How do you pick the codebase/project to research and how do you pick the specific part/section of the source code (or execution flow) to analyze? In general: what is your strategy? <!-- SC_ON --> submitted by /u/Lmao_vogreward_shard (https://www.reddit.com/user/Lmao_vogreward_shard)
[link] (https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/)

Exploiting the Menu: Breaking Restaurant Delivery Systems

Restaurant Delivery Systems streamline operations, but they can also present significant security risks. Here’s how I discovered a…Continue reading on Medium »
Read more...

Roadmap Cybersecurity Menuju Pentester Profesional (2025–2030)

Continue reading on Medium »
Read more...

Finding Broken Access Control in DoD

I just got back from a run and figured, “why not do a little bug hunting on the Department of Defense?” Yeah, sounds crazy, but it’s…Continue reading on Medium »
Read more...

Exploiting the Menu: Breaking Restaurant Delivery Systems
https://medium.com/@davimouar/exploiting-the-menu-breaking-restaurant-delivery-systems-37c473849ac8?source=rss------bug_bounty-5

Restaurant Delivery Systems streamline operations, but they can also present significant security risks. Here’s how I discovered a…Continue reading on Medium » (https://medium.com/@davimouar/exploiting-the-menu-breaking-restaurant-delivery-systems-37c473849ac8?source=rss------bug_bounty-5)

Roadmap Cybersecurity Menuju Pentester Profesional (2025–2030)
https://medium.com/@riskiardiansyah51938/roadmap-cybersecurity-menuju-pentester-profesional-2025-2030-8fec44f6ff23?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@riskiardiansyah51938/roadmap-cybersecurity-menuju-pentester-profesional-2025-2030-8fec44f6ff23?source=rss------bug_bounty-5)

Finding Broken Access Control in DoD
https://azraeldeathangel.medium.com/finding-broken-access-control-in-dod-c569305f9099?source=rss------bug_bounty-5

I just got back from a run and figured, “why not do a little bug hunting on the Department of Defense?” Yeah, sounds crazy, but it’s…Continue reading on Medium » (https://azraeldeathangel.medium.com/finding-broken-access-control-in-dod-c569305f9099?source=rss------bug_bounty-5)

Header Injection to Hero: How I Hijacked Emails and Made the Server Sing

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

Exploiting Web Cache Poisoning with X-Host Header Using Param Miner

Write-up Web Cache Poisoning Using an Unknown Header.Continue reading on InfoSec Write-ups »
Read more...

$750 Bounty: for HTTP Reset Password Link in Mattermost

How an Unsecured Protocol in a Critical Workflow Opened the Door for Network-Based Account TakeoversContinue reading on InfoSec Write-ups »
Read more...

Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard

Welcome Everyone to Another Writeup Recently while surfing the Infosec Twitter I came across a Post which mentioned Ganglia Dashboard . Had no Idea what it is so curiosity peaked in as usual :) What is Ganglia ? Ganglia is a scalable, distributed monitoring tool for high-performance computing systems, clusters and networks. The software is used to view either live or recorded statistics covering metrics such as CPU load averages or network utilization for many nodes. Where High Performance Computing systems are used ? An HPC cluster, or high-performance computing cluster, is a combination of specialized hardware, including a group of large and powerful computers, and a distributed processing software framework configured to handle massive amounts of data at high speeds with parallel performance and high availability.https://medium.com/media/2d2d2f1e10d2b4d2d38927f0c82ce1c9/href SHODAN TIME !!http.title:"Ganglia" From the Search results found something asGanglia:: Cluster Report that belonged to xyz.uohyd.ac.in Came to know uohyd.ac.in belongs to University of Hyderabad There is no prebuilt authentication mechanism for accessing Ganglia dashboard . From this dashboard one can understand how multiple computer systems are behaving as far as I have came to understand it . To check whether an organization is using ganglia all one have to do is add ganglia to their wordlisttarget.com/ganglia To search more about it use Google DorksIndex of:"Ganglia:: " Sources to read more about it :Ganglia (software) - WikipediaGitHub - ganglia/ganglia-web: Ganglia Web FrontendView Ganglia metricsOffSec's Exploit Database Archive I hope you learned something new :) . Bye Bye !! Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...