Sandbox_Scryer

ساندبوكس سكايرر الإصدار: 1.0.4 الترخيص: GPL v3 ساندبوكس سكايرر هي أداة مفتوحة المصدر لإنتاج بيانات صيد التهديدات والاستخبارات من مخرجات تفجير العينات في بيئة معزولة عامة. تستفيد الأداة من إطار عمل MITRE ATT&CK لتنظيم النتائج وترتيب أولوياتها، مما يساعد في تجميع مؤشرات الاختراق وفهم حركة الهجوم وف...

KaliIntelligenceSuite

Kali Intelligence Suite Kali Intelligence Suite KIS è uno strumento di raccolta di intelligence e data mining per penetration tester. Ha lo scopo di facilitare la raccolta intelligente in modo rapido, autonomo, centralizzato e completo, automatizzando: eseguire strumenti Kali Linux ad es.,...

hardcidr

hardCIDR Contesto Uno script Bash per Linux per scoprire i netblock, o intervalli, in notazione CIDR posseduti dall'organizzazione target durante la fase di raccolta informazioni di un penetration test. Queste informazioni sono mantenute dai cinque Regional Internet Registries RIRs: ARIN Nord...

bluing

Bluing Uno strumento di raccolta intelligence per hackerare il Bluetooth Inglese · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing precedentemente bluescan è uno strumento di raccolta intelligence per il Bluetooth scritto principalmente in...

ODIN

ODIN Beobachten, Erkennen und Untersuchen von Netzwerken Aktuelle Version: v2.0.0 "Huginn" ODIN ist ein Python-Tool zur Automatisierung von Intelligence Gathering, Asset Discovery und Reporting. Denken Sie daran, den Dev-Branch für die neuesten Entwicklungen zu überprüfen, und Feedback ist...

recon

Il progetto è stato spostato su monorepo. Vedi https://github.com/pownjs/pown per maggiori informazioni. Recon Recon è un framework di ricognizione di target basato su grafi di conoscenza. Usare grafi di conoscenza invece di rappresentazioni tabellari piatte rende più facile trovare le relazioni...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence AI offline on its own servers, connecting document-search tools to files in its possession, and collecting the software part...

aetherion

/\ | | | | | |...

Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months

Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity. Symantec and Carbon Black...

Kazuar: Anatomy of a nation-state botnet

In this article 1. Delivery 2. Module types 3. Botnet operations 4. Who is Secret Blizzard? 5. Mitigation and protection guidance 6. Microsoft Defender detections Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for...

osTicket 1.18.3 Intelligence and Security Analysis Module

This Metasploit auxiliary module is designed for intelligence gathering, security analysis, and vulnerability discovery in osTicket installations. It performs passive and active reconnaissance without direct exploitation and stores results in the Metasploit database for reporting...

PDFs: Portable documents, or perfect deliveries for phish?

Cisco recently developed and released an update to its brand impersonation detection engine for emails. This new update enhances detection coverage and includes a wider range of brands that are delivered using PDF payloads or attachments. A significant portion of email threats with PDF payloads...

GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool

The threat actor behind the GIFTEDCROOK malware has made significant updates to turn the malicious program from a basic browser data stealer to a potent intelligence-gathering tool. "Recent campaigns in June 2025 demonstrate GIFTEDCROOK's enhanced ability to exfiltrate a broad range of sensitive...

Researchers Detail Bitter APT's Evolving Tactics as Its Geographic Scope Expands

The threat actor known as Bitter has been assessed to be a state-backed hacking group that's tasked with gathering intelligence that aligns with the interests of the Indian government. That's according to new findings jointly published by Proofpoint and Threatray in an exhaustive two-part analysi...

Penetration Testing for System Security: Methods and Practical Approaches

Penetration testing refers to the process of simulating hacker attacks to evaluate the security of information systems . This study aims not only to clarify the theoretical foundations of penetration testing but also to explain and demonstrate the complete testing process, including how network...

DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection

The Threat actor known as DoNot Team has been linked to a new Android malware as part of highly targeted cyber attacks. The artifacts in question, named Tanzeem meaning "organization" in Urdu and Tanzeem Update, were spotted in October and December 2024 by cybersecurity company Cyfirma. The apps ...

Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese Hackers

A suspected Chinese threat actor targeted a large U.S. organization earlier this year as part of a four-month-long intrusion. According to Broadcom-owned Symantec, the first evidence of the malicious activity was detected on April 11, 2024 and continued until August. However, the company doesn't...

Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

Government agencies and non-governmental organizations in the United States have become the target of a nascent China state threat actor known as Storm-2077. The adversary, believed to be active since at least January 2024, has also conducted cyber attacks against the Defense Industrial Base DIB,...