November 2020

CMS Vulnerability Scanners for WordPress, Joomla, Drupal, Moodle, Typo3..

Leave a Comment / Penetration Testing, Tools and Utilities, Vulnerability Assessment

In this article we will look on 12 free and open-source vulnerability scanners for CMS (Content Management System) such as WordPress, Joomla, Drupal, Moodle, Typo3 and similar publishing platforms. We will look on Droopescan, CMSmap, CMSeeK, WPXF, WPScan, WPSeku, WPForce, JoomScan, JoomlaVS, JScanner, Drupwn, Typo3Scan vulnerability scanners that were developed specifically to find vulnerabilities in […]

CMS Vulnerability Scanners for WordPress, Joomla, Drupal, Moodle, Typo3.. Read More »

Bug Bounty Tips #9

Leave a Comment / Bug Bounty Tips

It’s time for another dose of bug bounty tips from the bug hunting community on Twitter, sharing their knowledge for all of us to help us find more vulnerabilities and collect bug bounties. This is the 9th part and in each part we are publishing 10 or more tips. Let’s start! 1. Bypass 403 errors

Bug Bounty Tips #9 Read More »

Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1)

Leave a Comment / Penetration Testing, Tools and Utilities

In this post, we will be introducing a new minimalistic tool for local privilege escalation attacks in Microsoft Windows systems. The tool is called localbrute.ps1 and it is a simple local Windows account brute force tool written in pure PowerShell. It doesn’t require any 3rd party modules and it is very small in size, which

Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1) Read More »