Do Son A new technique, "EDR-Freeze," uses a built-in Windows feature to suspend antivirus and EDR processes, giving attackers a critical window to operate undetected.
Open Source Tool
Defendnot disables Windows Defender using a novel method, directly interacting with the WSC. Learn how this new security tool works.
A curated list of the top cybersecurity tools for 2025, covering reconnaissance, wireless hacking, password cracking, forensics, and more.
Discover Waiting Thread Hijacking, a novel process injection technique that bypasses EDR systems. Learn how it stealthily executes code in remote processes.
IBM's X-Force Red discovers RemoteMonologue, a novel DCOM attack that bypasses LSASS protection and steals NTLM credentials without payloads. Learn how it works and how to mitigate it.
Unlock the power of the Active Directory Enumeration Tool with SoaPy, a stealthy solution for AD enumeration from Linux.
Introducing reNgine: The ultimate web app reconnaissance suite. Enhance your security assessment with advanced tools and uncover vulnerabilities like never before.
Learn about Activation Context Hijack and how Eclipse, a proof-of-concept tool, allows attackers to load and execute arbitrary DLLs within a target process.
Discover Vanir, Google's open-source tool designed to revolutionize security patch validation and keep Android users safe.
Discover the powerful technique of Kerberos relaying and its implications for Active Directory security. Learn how KrbRelayEx tool can help assess vulnerabilities in Windows networks.
Discover ShadowHound: a stealthy solution for effective Active Directory reconnaissance and BloodHound analysis.
Explore how Shadow Dumper extracts data from LSASS memory to assess security posture. Discover its versatility and stealthy techniques.
Discover Cable, a powerful open-source tool for Active Directory enumeration and exploitation. Enhance your understanding of AD vulnerabilities and privilege escalation tactics.
Discover how Kernel Callback Tables can be manipulated for process injection on Windows systems. Learn about the stealthy method employed by high-profile threat actors.
Protect your IoT devices with Genzai. An open-source toolkit that offers a cohesive solution for enhanced IoT security.
Enhance cloud security with Halberd's multi-cloud security testing tool. Proactively assess defenses and simulate real-world attack scenarios.
Learn about the concerns surrounding Chrome's App-Bound Encryption and the decryption of protected keys by a newly released open-source tool.
Discover VOIDMAW, an innovative technique to bypass memory scanners and hide problematic code from antivirus software.
Learn how Vulnhuntr, an open-source tool, can help you identify vulnerabilities in Python-based projects using the power of Large Language Models (LLMs)
Learn how FACTION can simplify your pen testing workflow. Automate report generation and collaborate effectively with team members.
OpenBAS is an open-source platform aimed at providing organizations with the ability to plan and execute detailed cyber adversary simulations
Learn about the critical vulnerabilities in CUPS and how Marcus Hutchins' open-source tool can help you detect and mitigate the CVE-2024-47176 vulnerability.