Browsing Category
Kali Linux
205 posts
The Kali Linux penetration testing platform contains a vast array of tools and utilities. From information gathering to final reporting.
PasteHunter: A Practical Guide to Automated Paste Site Monitoring for Leaked Data
I got interested in PasteHunter after seeing yet another breach postmortem where the first public sign of a…
OWASP Amass: The Definitive Guide to Attack Surface Mapping and Asset Discovery
The first time I ran OWASP Amass against a real target, the sheer volume of subdomains it surfaced…
DNSDumpster: The Complete Guide to DNS Reconnaissance for Security Researchers
I still remember the first time DNSDumpster saved me hours of manual dig queries during a bug bounty…
Objection: Complete Guide to Mobile Application Runtime Security Testing Using Kali Linux
Objection is a runtime mobile exploration toolkit, built on top of Frida, developed and maintained by SensePost. It…
Frida: Complete Guide to Dynamic Application Instrumentation and Runtime Analysis Using Kali Linux
Frida is a world-class, open-source dynamic instrumentation toolkit that allows testers, reverse engineers, and developers to inject JavaScript…
JADX: Complete Guide to Android APK Decompilation and Source Code Analysis Using Kali Linux
jadx (Dex to Java Decompiler) is a command-line and GUI tool, maintained by Skylot, that produces readable Java…
APKTool: Complete Guide to Android APK Reverse Engineering and Application Analysis Using Kali Linux
Apktool is a tool for reverse engineering third-party, closed, binary Android application packages (APK files). It is written…
MobSF: Complete Guide to Mobile Application Security Testing and Malware Analysis Using Kali Linux
Mobile Security Framework (MobSF) is an open-source, automated, all-in-one mobile application penetration testing, malware analysis, and security assessment…
YARA: Complete Guide to Malware Detection, Threat Hunting, and Rule-Based Analysis Using Kali Linux
YARA (“Yet Another Recursive Acronym,” or informally “the pattern matching swiss knife for malware researchers”) is an open-source…
CMSeeK: Complete Guide to CMS Detection and Web Technology Enumeration Using Kali Linux
CMSeeK is a modern, Python 3-based CMS detection and exploitation framework. Unlike WPScan or JoomScan, which are dedicated…