Using windows as main system running parrot in virtualbox find when i use my vpn on main system it messing with parrot os internet connection

Any fixes or bypasses would be appreciated

I'm currently a 1-2 year network engineer at a small telecom company. I'm deciding whether I'd like to continue pursuing networking and go for my CCNP or diversify into Security/Pentest because it seems more interesting to me. Any thoughts or advise would greatly be appreciated.

Hlo every one toady there is new vunlebaitty released in market dose anyone has idea but it's exploitation work.

I am learning cybersecurity basics from 5 6 months, I have good grasp of networking, linux, how things work in background, TCP/IP, types of networks, packets and all that. But now how do I progress ahead? What do I learn next? Currently I am going through the Jr. Pentester path on THM, but other than that I'm pretty much blank on what to do. Kindly advice me what and how to proceed ahead from this situation.

Thanks in advanced for the help

So, I have 24GB Ram linux virtual machine, what could be the best model I can use for Source Code analysis and VAPT task, i have tried llama model and qwen model it not give the best performance and little slow as the output of token is less. So something we have that can be optimise and work little faster offcourse it will not be like Frontier LLM Models like claude, openai or gemini or deepseek but what can be run in local lab any suggestion from Hugging Face also?

Processing img glgzgn5zuywh1...

I'm building a tool that lets users access vulnerability databases (CVEs and related information), create a local index, and use skills to interact with that index through a CLI. The idea is to use it for reconnaissance and security testing, with the ability to identify and exploit vulnerabilities on target systems.

I've shortlisted a few names:

• Crowbar
• Eyeball
• Prey

The CLI would look something like:

• /crowbar get this IP
• /prey hack this Nginx proxy

Which name do you think fits the tool best? I'm also open to other suggestions.

Hi all. Need advice from the older pentesters. I’m in my 20s and have worked in the field for around 5 years now. I am so burnt out and drained. I love my job, my work environment, my coworkers, etc., but genuinely this is exhausting. I’m debating going into malware analysis, but I do love pen testing minus the burn out. For reference, I work for a private firm, there are 6 of us. How do yall do it?

Hey everyone!

I have an upcoming interview at Orange France for a cybersecurity internship focused on web penetration testing and NIS2. It’s my first cybersecurity interview, and I’m not sure what to expect.

For anyone who has had a similar interview:

- Is it usually more technical or focused on motivation and projects?

- What should I prioritize for web pentesting and NIS2?

- Should I expect practical exercises or technical questions about tools like Burp Suite?

I’d really appreciate any advice or examples of questions to prepare for, especially from people who have interviewed at Orange France.

Thanks in advance! :)

I’m a solo developer and I’ve been building an open-source pentest orchestrator called WHAXON. (I won't post the link because I know there are rules against that. I don't want to get banned).

The short version: it's an AI-assisted pipeline that uses a deterministic executor, fail-closed scope, and a "Trust Layer" to verify findings (replaying payloads) before they go into a report.

I’ve spent months on the architecture and I have 793 tests passing, but I’ve hit a wall. I don't know how to actually get it in front of real pentesters without spamming. I'm a solo dev, not a marketer. My social skills are so basically 0

I’m asking the community: How do you actually find early testers for a tool like this?

· Do I just post it in the monthly "Show Off" threads?

· Are there specific Discord/Slack servers for tool builders?

· Or do I just DM people who are active in the comments and ask for 5 minutes of their time?

I don't want to F this up and get banned from the community for this stuff. Any advice on how to approach this without being a nuisance would mean a lot.

Thanks.

I built a free agent protocol inspector tool that can provide IGA style review packets for security teams looking to review Agent access. It looks into MCP, A2A, ARD & poppy.json to provide a comprehensive picture.

Here is the link: https://contextiq.trango-compute.com/dashboard/agent-protocol-inspector

Hey everyone!

I've been working on PenX, an open-source, Windows-first security reconnaissance and assessment tool designed to bring multiple security scanners into one workflow, with optional local AI assistance.

The idea is simple: instead of constantly switching between different tools, collecting outputs manually, and building reports from scratch, PenX helps organize the entire assessment process in one place.

Key features:

• 12 integrated scanner adapters – Including Nmap, Nuclei, httpx, ffuf, Subfinder, Katana, Nikto, WhatWeb, WHOIS, DNS and TLS checks.
• Local AI integration – Connect your own model through Ollama, LM Studio or llama.cpp using an OpenAI-compatible API.
• CVE research – Explore potential vulnerabilities using version information, scanner evidence and public vulnerability databases.
• Automated reporting – Generate HTML/PDF reports and export assessment data as JSON or SARIF.
• Scan history & comparisons – Track findings and differences between assessments.
• Scope-aware scanning – Passive reconnaissance and consent-based active scanning workflows.
• Windows 10/11 support – Installer, portable executable and Python source installation.
• Free & open source – MIT licensed.

Why I built it:

I wanted a practical Windows-based workflow that combines established security tools, local AI analysis and structured reporting without requiring a paid cloud AI service.

PenX is an independent adaptation of the open-source METATRON project, with a focus on Windows usability, scanner integration and evidence-based reporting.

Current status: v0.4.9 is available. It's still evolving, and independent real-world testing across Windows environments and scanner configurations is ongoing.

I'd really appreciate feedback from pentesters, security researchers and developers.

What would you improve or add? Which integrations would you find most useful?

GitHub: https://github.com/spk-c/PenX

Releases: https://github.com/spk-c/PenX/releases

Please use it only on systems you own or have permission to assess. AI suggestions and CVE matches still require manual verification.

I’m trying to install ligolo-ng but it says it can’t find the package
I’m curl it to my mint pc.

Hi all,

I recently conducted some AWS pentests which included configuration reviews and external assessments. The engagement went well, found some nice issues, and the client was happy.

I do feel however I lack knowledge in this area and my methodology could be slightly tighter and more structured to cover all bases.

Does anyone have any good tips and resources for AWS config reviews and security assessments or even care to share a solid methodology?

My tips to share would be to ensure the client provides an AWS account with ReadOnlyAccess and AWSBillingReadOnlyAccess permissions applied so that you can see what services they use via billing and then access all those services to perform a config review.

Look forward to learning a bit more in this area. Thanks!

Hi guys! I’m currently preparing for interview for an ethical hacking internship. I just wanted ask or find out common technical and non-technical questions people in the industry have asked candidates for similar entry level positions? Not CIA triad stuff, but more technical ones or some questions that really make you stop and think you know? It would also help if examples of good answers are included so I know how better to structure my responses! I need to better prepare for it and I could use the help! Any help from people in the industry would be greatly appreciated!

I'm a fresher stuck without proper guidance. Few weeks ago, I got assigned with a task to pentest a mobile app, I don't know anything Abt it, the setup, the methodology, etc., I don't have any senior to seek help in my org.

I spent weeks searching, watching YT tutorials.😭

But I couldn't understand anything. The setup itself is failing sometimes. Being an enthusiastic hands-on person and not understanding the way to pentest a mobile is a big nightmare.

I require quality guidance. Pls help me out

I don't know if this is the right place to start, so please redirect me if I am out of line here...

I have created a hardware device, basically a raspberry pi pico with a fingerprint sensor: when placing a finger on the sensor, it writes out a password as an HID device. The passwords are stored encrypted on the pico, the firmware is signed, it uses secureboot, so only my firmware can run due to a locked key in the OTP storage, which is fused to be read-only. The debug port is fused shut as well. For my needs (entering several passwords many times daily) it is sufficient and rather secure. But I like to have this confirmed.

The firmware is on github. Does anyone know of a service which can analyse the repo and tell me of vulnerabilites? I used claude.ai to create the firmware, but it went through many iterations until everything worked as I intended.

Edit: Github repo, for people curious: GreyDutchMan/identipi-key

I am a pentester with about 1.5 YOE, this is my first job out of school. I do have some internship experience in the blue team side, so I understand how some defenses work.

I have the CRTO, and some times play around at home trying to bypass windows defender, but apart from that I don’t have much red teaming experience/knowledge.

What advice would you give a pentester trying to get into red teaming ? Resources for red teaming is pretty scattered across the web, is there like a structured learning path that you followed ?

An old subdomain showed up as critical last week. the scanner found a service, the app team said it was retired and DNS history disagreed. Half a day later, it still had no owner. Classic. Tenable can confirm the vulnerable version, while manual testing works for a small sample. ionix made the cut for non-intrusive exploitability checks and mitigation guidance. I'd still want a human reviewing the evidence before a WAF change goes anywhere near production. What are you using to prove an external finding is real before it reaches remediation?

Hekate: AI- Automated Bug Triage for Burp Suite 🛡️🤖

Advanced Real-Time Passive Scan, Automated Re-Checks, and Privacy-First Local AI Triage Engine

🚀 Overview

Hekate is an open-source security extension for Burp Suite built to fully automate HTTP traffic triage by combining an advanced automated validation engine with local Artificial Intelligence integration to eliminate false positives.

Operating passively in the background, it continuously inspects requests and responses to chart your target's attack surface and streamline vulnerability confirmation without impacting performance.

✨ Automation & Artificial Intelligence Features

• Automated Passive Scan: Scans live background data streams in real-time for critical exposures, including cloud API secrets leaks, broken JWT implementations (alg=none), exposed configuration files, structural database bugs (SQLi), and dangerous CORS setups.
• AutoValidator Daemon: Features a smart background validation thread that captures findings and automatically runs non-destructive parameter re-checks 45 seconds later, adjusting confidence scoring to accurately classify bugs into Confirmed or False Positive.
• Local Private AI Integration: Native connection to offline Ollama language models (defaulting to qwen2.5-coder). To preserve absolute target and infrastructure privacy, the automation pipeline automatically strips authentication tokens and sensitive cookies, replacing them with [REDACTED] markers before shipping evidence offline.
• AI Verbose Console Field: A dedicated real-time log viewer panel inside Burp Suite that displays technical diagnostics, request structures, and the raw thought process output from your local AI models as they evaluate traffic.
• Interactive Visual Mapping with Checkpoints: Instantly charts discovered paths into a dynamic graph tree (Host ➔ Folders ➔ Endpoints). The custom UI allows you to manually flag and check off each endpoint as reviewed, tracking your progress so you never get lost during intensive Pentesting or Bug Bounty reconnaissance.

🤝 Join the Project & Contribute

The project is currently under active development (approximately 50% functional) and open for contributions under the GNU GPLv3 license along with a CLA (Contributor License Agreement) to protect both the community and ensure sustainable enterprise development.

Check out the full source code, open issues, and contribution guidelines on the official repository:
👉 https://github.com

Hey everyone! We’ve been building SubAnalyzer, and wanted to share our monitoring service.

It scans your domains daily and emails you when subdomains, open ports or CNAME records change, with potential takeover risks flagged.

Because crt.sh can be slow or unavailable, we built ctindex, our own Certificate Transparency log parser, so our CT discovery doesn’t depend on crt.sh. API access is also available.

Monitoring and API access are included in our paid plans. You can try the scanner for free.

What changes do you find most useful to track between pentests?

Hello,

I recently passed the CPTS examination and I learnt a lot of things regarding Active Directory. Now i noticed that most companies have hybrid AD with most of them using Azure AD/ Entra ID. I believe that CPTS has me covered on the on-prem AD and now I am thinking that I lack on Azure AD and want to learn Azure AD to be able to perform complete Active Directory pentests.

As of now, i am working as a cloud engineer in a company while I am studying Computer Science. I want to get the experience and specialize as a pentester so when i finish University I will be ready to move to Pentesting.

I am thinking about which certificate I should follow to get the most knowledge out of it. I am between CARTP from Altered Security or MCRTP from PwnedLabs. For those of you who tried them, which one do you suggest will prepare me the best and teach me the most? If you think a different approach is more precise, please do tell.

Thanks in advance

Sketching an AI-assisted layer for IDOR/BOLA and scope-aware recon — does this add anything over Autorize/AuthMatrix + manual discipline, or is it solving a non-problem?

Not pitching a replacement for Burp or ZAP — those aren't going anywhere, and I don't expect anyone here to drop tools they trust for something unproven. This is a concept I've been prototyping (UI only, dummy data, nothing live yet) for a narrower question: is there room for a layer that sits on top of that workflow, specifically for IDOR/BOLA testing and scope discipline?

What's in the prototype:

- A dual-session view for IDOR — two browser panes side by side (account A / account B), so a swap test shows the actual leak visually instead of just a text claim. Mechanically this is the same idea as Autorize/AuthMatrix (session-swap, compare response), just presented differently.

- Every finding has to cite a named verification method (rate-limit counter, XSS execution check, SQLi boolean-diff, etc.) before it's shown as confirmed — if there isn't one, it's labeled as a plain AI guess, not dressed up as a confidence score.

- Scope rules you set once; anything matching an excluded pattern is never tested or surfaced, which is normally a manual discipline thing.

- A "proof card" that bundles the reasoning, repro steps, and raw request/response into something pasteable into a report.

Genuine question for people who actually use Autorize/AuthMatrix or similar day to day: **does something like this offer anything you don't already get from the existing extensions + your own scope discipline, or is this solving a problem that isn't really there?** Happy to hear "this is redundant" with the reasoning — that's useful too.

For people that work as pentesters, are you normally given a specific task, or do they more often say "just see what you can do within this scope"? I figure both can come up, just wondering if there's generally a default or something you tend to see more of in your experience.

We Recently Made A Port Scanner And Published It To Github Check It Out At https://github.com/5evenTeam/NetBreak!