What is Sn1per aka Sniper? Is it touted as the "Ultimate Pentesting Toolkit".  Not only does this do vulnerability scanning like OpenVAS does, it also comes with many modules to do much more.  From OSINT, information gathering, Attack surface mapping and discovery, and has automated attack testing for the usual

What is Fess?  Fess is an Open Source self hosted Internal Search Engine solution. Think of it as having your own Internal Google Search Appliance that is free and Open Source!  With FESS you can fully customize the interface, and configure a bunch of crawling sources including files locally or

There are a couple MX / Mail Route Diagnostic tools on the internet, the most famous you probably have heard of is MXtoolbox.  These tools can come in handy to troubleshoot mail delivery issues, see where there are delays or problems, and even aid in potential phishing email analysis.   To that

One of the cooler and less known tool and platform I use regularly, and has many uses for Cybersecurity professionals, Developers and learning purposes is KASM Workspaces.   What is it? Kasm Workspaces is a docker container streaming platform that enables you to deliver browser-based access to desktops, applications, and web

What is n8n? n8n is an open-source, node-based automation platform that allows users to automate complex workflows quickly and easily. With n8n, you can create custom workflows using visual methods, (think visio), connecting different services and triggering actions based on specific events. It is similar to Zapier and other Cloud

After writing the 60 Hudson Street article, I stumbled across this awesome command line tool to do OSINT on network path traversal.  Some of the capabilities of this tool are ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup tool / Internet

Password Pusher, what is it you ask? It is a secure way to send Passwords to a person in an email without actually having the password itself in the email body where it is not secure.  DO NOT EVER send passwords in an email or via SMS or any other

Credit: Some of the screenshots in this article have been taken from Official documentation from Strangebee, some are my own custom screenshots to make the writing of this article easier. Let's start with a little background, The Hive and Cortex have been around for a few years, more detailed information

So I thought I would post what OpenCTI can show us, visually, the correlations and the cool benefits of when you setup your own OpenCTI instance.  Just how neat of a platform it is, compared to MISP or Yeti for comparison.  It is a real time, dynamically updated, powerful database

In this article, I am going to show you how to setup your own dedicated Vulnerability Scanner Platform in a Linux VM with VPN for anonymity. NOTE: VPN setup is outside the scope of the article, although its very easy, just follow the VPN providers setup instructions for your Linux

Nikto, what is it?  Its one of my favorite CLI driven Web Vulnerability scanners to check thousands of best practice setup variables and vulnerabilities.  It is used to proactively check and give insights on what you need to change to secure that website to the highest level you can. While

UPDATE 9/26/2023 :  Docker-Compose upgraded to version 5.10.3 RELEASE NOTES Here are 4 great RSS feed URLS to get you going.  If anybody has an interest for me to add a RSS ingestion setup section, please let me know.  It is fairly self explanatory.  It is under