When you tell people you’re a cybersecurity intern, they often get a certain picture in their head — something straight out of a movie…

This part examines India’s position as a rising cyber power, whose strategy is shaped by a unique blend of national security imperatives…

The “We Speak CVE” podcast focuses on cybersecurity, vulnerability management, and the CVE Program.

This part analyzes Russia’s doctrine, which views the information space as the primary battlefield for an asymmetric conflict with the…

The accelerating integration of artificial intelligence across critical sectors demands a parallel focus on robust security measures. As AI…

How You Can Actually Start a Career in Cybersecurity

This series will follow the hands-on projects from 0xrajneesh/Windows-Forensics-Projects-for-Beginners — a great resource designed to help…

Cyberfox perangkat lunak turunan dari mozilla firefox salah satu tools Attacking untuk Menguji, memiliki fitur geolokasi, koloning tab…

Master Network Security Analysis: Detecting DNS Tunneling, Phishing, and Log4J Attacks with Zeek

📌 Introduction

I tweet nonsense and it magically turns into money.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

An Infosec Survival Guide Resource, released as blog posts, with fully designed, printer-friendly PDF cheatsheets.

DNS Triage is a reconnaissance tool that finds information about an organization's infrastructure, software, and third-party services as fast as possible. The goal of DNS Triage is not to exhaustively find every technology asset that exists on the internet.…

CredMaster is a tool that facilitates password guessing attacks against common targets. It is designed with evasion and anti-detection capabilities and uses AWS APIs to rotate IP addresses for each guess.

GraphRunner is a collection of post-exploitation PowerShell modules for interacting with the Microsoft Graph API. It provides modules for enumeration, exfiltration, persistence, and more!

Burp Suite is an intercepting HTTP proxy that can also scan a web-based service for vulnerabilities. A tool like this is indispensable for testing web applications. Burp Suite is written in Java and comes bundled with a JVM, so it works on any operating system…

Impacket is an extremely useful tool for post exploitation. It is a collection of Python scripts that provides low-level programmatic access to the packets and for some protocols, such as DCOM, Kerberos, SMB1, and MSRPC, the protocol implementation itself.

Wireshark is an incredible tool used to read and analyze network traffic coming in and out of an endpoint. Additionally, it can load previously captured traffic to assist with troubleshooting network issues or analyze malicious traffic to help determine what…

Hashcat is a powerful tool for recovering lost passwords, and, thanks to GPU acceleration, it’s one of the fastest. It works by rapidly trying different password guesses to determine the original password from its scrambled (hashed) version.

Offensive Purpose: Efficient way to gather info about web services & their hosting infrastructure. Automates taking screenshots for quick & easy review.