pamspy — Credentials Dumper for Linux pamspy leverages eBPF technologies to achieve an equivalent work of 3snake. It will track a particular userland function inside the PAM (Pluggable Authentication Modules) library, used by many...
The post pamspy: Credentials Dumper for Linux using eBPF appeared first on Penetration Testing Tools.
evilgophish Combination of evilginx2 and GoPhish. Why? As a penetration tester or red teamer, you may have heard of evilginx2 as a proxy man-in-the-middle framework capable of bypassing two-factor/multi-factor authentication. This is enticing to us, to say the...
The post evilgophish: Combination of evilginx2 and GoPhish appeared first on Penetration Testing Tools.
Critical vulnerabilities discovered in the NVIDIA Triton Inference Server platform pose a significant threat to the security of AI infrastructure across both Windows and Linux environments. This concerns an open-source solution designed for large-scale...
The post Triple Threat in Triton: Critical Flaws Expose AI Servers to Full Takeover appeared first on Penetration Testing Tools.
Proton, a company renowned for its commitment to privacy and security, made an unfortunate misstep in its latest offering—Proton Authenticator, a two-factor authentication app. In the iOS version, users’ TOTP secrets—used to generate one-time...
The post TOTP in the Clear: Proton Authenticator’s Privacy Misstep on iOS appeared first on Penetration Testing Tools.
Apple is developing its own AI engine for answering questions—akin to ChatGPT—according to a report by Bloomberg. The initiative is being led by a newly formed internal team known as Answers, Knowledge, and Information...
The post Apple Forms New “Answers” Team to Build a ChatGPT Rival, Reshaping AI Search appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in the Squid proxy server, enabling remote execution of arbitrary code. The flaw affects nearly all actively used versions, and given the widespread deployment of Squid, millions of...
The post Critical Squid Flaw Allows Remote Code Execution & Data Leakage appeared first on Penetration Testing Tools.
In the first half of 2025, Sonatype uncovered a large-scale, ongoing assault on the open-source software ecosystem, orchestrated by the North Korean threat actor known as Lazarus. Sonatype’s automated malware detection systems were the...
The post Lazarus Group’s Covert Supply Chain Attack: North Korean APT Poisons Open Source to Steal Developer Secrets appeared first on Penetration Testing Tools.
A new large-scale threat has emerged on the Android horizon, dubbed PlayPraetor—a sophisticated piece of malware capable of seizing full control over compromised devices. To date, over 11,000 devices have fallen under its sway,...
The post PlayPraetor: New Android RAT Infects 11,000+ Devices with Real-Time On-Device Fraud appeared first on Penetration Testing Tools.
The government of Luxembourg has launched an official investigation into an unprecedented disruption of the national telecommunications system that occurred on July 23. The cause of the outage, which left 4G and 5G mobile...
The post Luxembourg Hit by “Sophisticated” Cyberattack: Huawei Equipment Targeted, Mobile Networks Down for Hours appeared first on Penetration Testing Tools.
Experts at Palo Alto Networks’ Unit 42 have uncovered a new cyber-espionage campaign targeting the telecommunications sector in Southeast Asia. At the heart of these operations lies a threat actor identified as CL-STA-0969, closely...
The post The Telecom Threat: Liminal Panda’s Covert Campaign Targets Southeast Asian Critical Infrastructure appeared first on Penetration Testing Tools.
In the autumn of 2024, Microsoft reintroduced a controversial feature in Windows called Recall—an artificial intelligence system that periodically captures screenshots, allowing users to later search through their entire on-screen activity. Marketed as a...
The post The Dark Side of Recall: Microsoft’s AI Feature is Still Capturing Sensitive Data and Poses Grave Security Risks appeared first on Penetration Testing Tools.
For nearly a year, a malicious module known as Plague evaded detection by Linux security solutions, despite its active proliferation and deep entrenchment within one of the system’s most critical components—the authentication stack. Its...
The post Plague Backdoor: New Linux Malware Infiltrates Authentication Stack, Evading Detection for a Year appeared first on Penetration Testing Tools.
Mozilla has issued a stark warning to Firefox extension developers regarding a new phishing campaign targeting their accounts on the official AMO platform (addons.mozilla.org). This ecosystem encompasses over 60,000 extensions and more than half...
The post Mozilla Warns Firefox Extension Developers of New Phishing Campaign Targeting AMO Accounts Tags: Mozilla, Firefox, Add-on appeared first on Penetration Testing Tools.
A malicious package discovered in the NPM ecosystem by researchers at Safety turned out to be far more than a simple trojan for cryptocurrency theft—it stood as a striking example of an attack orchestrated...
The post AI is the New Malware: AI-Generated Python Package Infects 1,500+ with Stealthy Crypto-Stealer appeared first on Penetration Testing Tools.
Cyberattacks in the first half of 2025 have accelerated to a terrifying new pace. From credential theft and ransomware assaults to leaks of sensitive information and mass session hijackings, nearly every metric in Flashpoint’s...
The post The Infostealer Epidemic: Cybercrime Surges 800% in 2025, Fueled by Stolen Digital Identities appeared first on Penetration Testing Tools.
The ShadowSyndicate infrastructure—also known by the alias Infra Storm—has come under intense scrutiny from cybersecurity professionals following its significant overlaps with some of the world’s most notorious ransomware operations. Active since mid-2022, the group...
The post Unmasked: ShadowSyndicate’s Global Ransomware Empire Blurs Lines Between Cybercrime and Geopolitical Espionage appeared first on Penetration Testing Tools.
Experts at the Genians Security Center have uncovered a sophisticated new variant of the RoKRAT malware, attributed to the North Korean threat group APT37. This latest iteration employs an unusually covert method of hiding...
The post APT37’s Stealthy RoKRAT Malware Uses Steganography in JPEGs to Evade Detection appeared first on Penetration Testing Tools.
BEE·bot OSINT automation for hackers. BBOT is a recursive, modular OSINT framework written in Python. It is capable of executing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with its gowitness module),...
The post bbot: OSINT automation for hackers appeared first on Penetration Testing Tools.
The prominent German firm Einhaus Group, renowned for its specialization in mobile device insurance and servicing, has formally announced the commencement of bankruptcy proceedings. The downfall was precipitated by a cyberattack in March 2023,...
The post The Ransomware That Never Ends: Einhaus Group Collapses After Paying Royal’s $230K Ransom appeared first on Penetration Testing Tools.
In the ongoing development of Linux 6.17, the volume of Rust code and the number of associated abstractions continue to grow. As with recent releases, Rust is steadily establishing itself within the kernel as...
The post The Rust Invasion: Linux Kernel 6.17 Sees Major Rust Code Additions for Drivers & Infrastructure appeared first on Penetration Testing Tools.
