FingerprintX is a blazing-fast Go tool that outpaces Nmap in service detection and works perfectly with Naabu for bug bounty recon

Plaguards automates PowerShell deobfuscation, helping security teams quickly identify threats and false positives with comprehensive PDF reports.

BFScan is a powerful tool to extract URLs, paths, and secrets from JAR, WAR, and APK files, generating raw HTTP requests and OpenAPI specs for security analysis.

Kereva LLM Code Scanner is a static analysis tool for Python LLM code, detecting security risks, performance issues, and vulnerabilities like prompt injection.

Jxscout is a new tool for security researchers, analyzing JavaScript code for vulnerabilities. It works with proxies like Burp/Caido, offering beautification, source map discovery, and AST analysis.

dAWShund is a new tool suite to enumerate, evaluate, and visualize AWS IAM policies and resource access conditions, helping security teams manage and secure cloud permissions.

COMmander is a lightweight, practical tool that monitors deep-seated RPC and COM activities in Windows, designed to detect subtle, invisible threats that bypass traditional security.

Scan for secrets using regex+entropy with LLM

Building a cybersecurity home lab is an invaluable way to learn practical security skills, test vulnerabilities, and experiment with…

Let’s be real, cybersecurity can feel like an endless money pit. Between pricey software subscriptions and consultants charging by the…

Here are several Security tools which are enabling developers to address security issues early in the development process.

Static Application Security Testing (SAST) is a key part of modern application security. Over 70% of applications have at least one…

COMmander is a new, lightweight C# tool that leverages the Windows RPC ETW provider to enrich defensive telemetry, enabling granular detection of RPC/COM events.

The rise of APIs has revolutionized how modern applications communicate, but this convenience comes with rising security risks. Protecting…

Sysmon capabilities are now natively integrated into Windows 11 and Server 2025, providing built-in security telemetry for process and network monitoring via Windows Update.

Summary

Odysafe CTI Platform : l’outil open-source qui simplifie vraiment la gestion des IOCs

Explore how modern teams choose API security tools in 2026, based on real risk, scalability, and fit within fast-moving development…

In this article, I explain how I designed and built an opinionated, extensible scanner that blends HTTP analysis, TLS inspection, Nmap…

Discover how we simplified the journey to effective security testing