A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.

This tutorial assumes that you know how to write the CREATE TABLE statement. If this is not the case, you should check out the CREATE TABLE tutorial.

PHP get_headers ssrf vulnerability : CVE-2020-7066

PHP could allow a remote attacker to obtain sensitive information, caused by an issue when the get_headers() silently truncates anything after a null byte in the URL it uses. By persuading a victim to visit…

EDITED EDITION — Getting Started in Pentesting The Cloud–Azure | Beau Bullock | 1-Hour

SharpSpray is a Windows domain password spraying tool written in .NET C#.

Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection

QueenSono tool only relies on the fact that ICMP protocol isn't monitored. It is quite common. It could also been used within a system with basic ICMP

IEMLabs brings you the opportunity to register for this Cyber Intelligence Session by Deepak Kumar (D3) for FREE Perks:

Metadata Enumeration

Azure Outlook Command & Control. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP = Abuse Microsoft Graph API for C2

This is TorBot ported to Golang.

The Cockpit web console is a tool to monitor the server’s overall status, performance, and health. You can install the Cockpit web console on your local

PowerShell for Pentesters is a basic introduction to using PowerShell on internal penetration tests. This course is essentially the PowerShell module from my