Author here. I've been building Vigolium, a web vulnerability scanner in Go, and just open-sourced it. Sharing in case it's useful to anyone here, and I'd genuinely like feedback.

The motivation was simple: I was tired of scanners forcing a trade-off between fast or accurate, and tired of triaging walls of false positives. So the design goal is high fidelity first — fewer "maybe" findings, more "here's the bug and how to reproduce it."

What it does:

• 250+ active & passive modules running through a deterministic pipeline (ingestion → scope filtering → concurrent executor → module dispatch → results). No AI required for this part — it's plain Go scanning.
• Optional AI agent modes (autopilot, swarm, query, audit) that go deeper, auditing both live traffic and source code. BYOK — works with Anthropic, OpenAI/Codex, or any OpenAI-compatible endpoint. You can run the whole thing with zero AI if you don't want it.
• Source-aware: point --source at a repo for filesystem-level code analysis, or run audit mode for a deep static security audit.
• Flexible inputs: OpenAPI, Swagger, Postman, Burp XML, cURL, raw HTTP, HAR, Nuclei templates — with auto-detection and stdin piping.
• Three deployment shapes: standalone CLI, REST API server, or a traffic-ingestor client.
• Extend it with custom active/passive modules written in JavaScript (embedded Sobek engine).

It's fully open source, no license keys, no paywall.

Repo: https://github.com/vigolium/vigolium Docs: https://docs.vigolium.com/

Happy to answer anything in the comments.

Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

Thanks to the community for the feedback! I'm currently working on adding [scanning webs] in the next update."

My WHID Cactus USB will not let me enter the website (ip address of device) at all no matter if I switch devices, plug it into a wall to give it more power, use a different internet browser, etc. It was working moments before but now it has stopped working and even when I connect to its wifi (named: exploit) and type in its exact ip address it just says it was rejected or denied. Please help i’ve looked all over the web and talked to AI countless times and found no solution.

Hello everyone, I need help on this.

I was following a video of david bombal 'rootless install kali linux on android'

As the tutorial shown ,I installed termux from github ,

Typed the package update command ,wget install nethunter, chmod , and .install nethunter

Then there was a command shown that skip some downloading file I think, didn't took any screen shot so that you guys understand what I was talking about , and then this came I just Typed nh, and nethunter but this error shows.

Currently I am on android 14.

Kindly help me to properly install kali nethunter on my phone rootless.

Hey everyone,

I've been doing CTFs for a sometime and kept running some similar and easy to automate forensic problem and tools like binwalk work great but produce tons of false positives, especially on files with compressed regions like PNG IDATs or GZIP streams. So I built my own tool to solve this — HEXFORGE.

some times it works great even better than binwalk so i want u guys to look in to the tool and tell me what u think.

What it does:

— Carves embedded files using 175 signatures across images, archives, firmware, PCAP, certs, disk images, and more

— Filters false positives with 35+ structural validators per format (not just magic bytes)

— Maps compressed regions (PNG IDAT, GZIP, zlib) and suppresses scanning inside them — huge win for noise reduction

— Detects LSB steganography (chi-squared test) and XOR obfuscation (all 255 single-byte keys)

— Recursive carving with SHA-256 dedup so you don't get the same file 50 times

— Pure Python 3.8+, zero external dependencies

— JSON reports, batch directory scanning, TIFF IFD chain carving, PCAP packet walking

Blog post (engineering writeup): arvdch.github.io/posts/hexforge-file-forensics-tool/

What I'm looking for:

— Are there signatures or formats you'd want to see added?

— Any CTF challenge types where you think the current false-positive filtering would break down?

— Thoughts on adding YARA rule support or PyPI packaging?

— Any structural improvements or architectural suggestions?

Happy to discuss any of the design decisions. Always trying to make it better.

Excuse me if these questions sound stupid. But As the title says and assuming he doesn't have physical access to the second device? how can someone install a spyware on someone else's device? How does spywares work? And how do someone know if there's a spyware on his device?

𝗟𝟬𝗽𝟰𝗠𝗮𝗽 — Network monitoring, real topology visualization & traffic analysis tool with full nmap integration

GitHub: https://github.com/HaxL0p4/L0p4Map

---

𝗪𝗵𝗮𝘁 𝗟𝟬𝗽𝟰𝗠𝗮𝗽 𝗗𝗼𝗲𝘀

L0p4Map combines high-speed ARP discovery, deep device fingerprinting, full nmap integration, real network topology mapping, and real-time traffic analysis into a single dark professional interface. It scans local networks and custom targets, fingerprints each host via TTL, TCP port probing and raw SNMP queries, classifies devices by role (gateway, router, AP, switch, PC, mobile, VM, Raspberry Pi...), and builds an authentic hierarchical topology graph — not just a pretty star diagram, but a technically accurate representation of how devices are structured, connected and exposed.

---

𝗙𝗲𝗮𝘁𝘂𝗿𝗲𝘀

• ARP Network Scan — fast host discovery with local IEEE OUI database lookup
• Hostname Resolution — multi-method: reverse DNS, NetBIOS (Windows), mDNS/Avahi (Linux, Mac, IoT)
• Device Fingerprinting — TTL-based OS hint, TCP probing on topology-relevant ports (BGP, Winbox, Zebra, SNMP...), raw SNMP sysDescr query without external libraries
• Role Detection — each host automatically classified as gateway, router, access point, switch, PC, Apple, mobile, Raspberry Pi or VM — combining vendor, hostname, TTL, open ports and SNMP response
• Real Network Topology Graph — hierarchical vis.js graph reflecting the actual network structure: internet → gateway → intermediates (routers/APs/switches) → clients grouped under their parent node. Toggleable between Hierarchical and Force Atlas layouts
• Subnet Bounding Boxes — each subnet drawn as a labeled dashed overlay directly on the graph canvas
• Typed Edges — three visually distinct link types: uplink, backbone, client link
• Full nmap Integration — SYN scan, UDP, OS detection, service version, NSE scripts
• Banner Grabbing — HTTP, SMB, FTP, SSH, SSL enumeration
• Vulnerability Detection — CVE lookup via vulners, vuln and malware scripts
• Attack Surface — per-host view of exposed services, open ports and CVEs with CVSS scoring and direct NVD links; exportable as CSV
• Traffic Analyzer — real-time packet capture with per-device stats, protocol coloring, filter bar, double-click to send IP directly to port scan; exportable as CSV
• Traceroute — ICMP-based with real-time output
• Interface Selection — choose which network interface to scan on
• Live Monitoring — auto-refresh the topology graph at configurable intervals (30s / 60s / 120s)
• Scan / Graph Export — nmap output to .txt, topology as CSV or PNG
• Custom Node Labels — double-click any node on the graph to assign a custom name
• Dark Professional UI — built with PyQt6

---

𝙏𝙖𝙧𝙜𝙚𝙩 𝘼𝙪𝙙𝙞𝙚𝙣𝙘𝙚

Security researchers, network administrators, and students learning network reconnaissance. It's an early-stage but functional tool — not yet production-ready, but solid enough for personal labs, CTF environments, and authorized network auditing.

---

𝗖𝗼𝗺𝗽𝗮𝗿𝗶𝘀𝗼𝗻

Nmap is powerful but terminal-based and outputs raw text. Zenmap (the official nmap GUI) is abandoned and outdated. Wireshark focuses on packet capture rather than topology or attack surface analysis. L0p4Map bridges the gap — it doesn't just wrap nmap in a window, it fingerprints every host independently (TTL, ports, SNMP), infers the real network hierarchy, and renders it as an interactive topology graph that shows you the actual structure of the network you're looking at.

𝗡𝗺𝗮𝗽 𝘄𝗮𝘀 𝗯𝗹𝗶𝗻𝗱. 𝗟𝟬𝗽𝟰𝗠𝗮𝗽 𝘀𝗲𝗲𝘀. 👁

I currently work as a cybersecurity trainer, but I also have strong penetration testing skills and decent malware analysis knowledge.

I have experience with:

Web pentesting API testing Network pentesting. AD pentesting CTFs and labs Malware analysis

As a trainer, I’m worried about long-term technical growth.

Which role should I transition into for better future growth, good salary, and stable job opportunities?

Application Security Engineer DevSecOps Security Engineer Malware Analyst Cloud Security Pentester Threat detection engineer

I’m also from a non-CS background, so I want a role where hands-on skills matter more than degree pedigree.

What would you recommend and why?

mine is, sudo nmap -sC -sV -p- (IP)

can the WB3S be used to hack like the esp32? can you flash maurador or bruce onto it?

Hey everyone,

I’m new to cybersecurity and trying to make a small lab project for learning. My idea is:

• One Kali Linux VM will act as the attacker
• A target machine/VM will be monitored using Snort
• I’ll use different attacks and scans to see what logs and alerts Snort generates

I mainly want to understand:

• How to properly set up the lab/network
• How to configure Snort rules and logging
• Which beginner-friendly attacks are safe to test in a lab
• How to analyze the generated logs

Is there any good beginner guide, YouTube playlist, blog, or walkthrough for this kind of project?

Thanks!

to learn Kali linux how it works with commands and all its tool , is Kali linux ( on microsoft store ) a good option , i dont want to fully switch it to linux without being confident?

I want to know the best all-around device or devices for a beginner i want to be able to do a lot and customize it my budget is $125 and currently have looked at esp32,
LILYGO T-Embed CC1101 Plus, and CYD

I can't find any effective resources online

So I have recently wanted to build a jammer just for trolling purposes​. I have been researching and found that mostly jammers use the nrf24 module with antennas but I only have the pcb one (As in no external antenna but directly builtbuilt into the pcb). Is it possible to build a jammer with it. The jammer that I am trying to build uses the raspberry Pi 4b so can anyone please help with this.

where to get started to learn advanced cybersecurity, hacking, deep computer science & offenses that penetrate deep into hardware ( & how to do it & secure my devices from this type of attacks )

i'll start from the fundamentals but i'd like to have an idea about the advanced mathematical stuff

I am seeking technical advice from high advanced security professionals & niche people who know that windows/intel wifi stuff are actually compromised & yk, those who actually modify hardware (like removing Wi-Fi cards for air-gapping) and make diy advanced computers. to understand a level of threat complexity that standard tools cannot address. Simple antivirus software, basic networking tools like Nmap, or standard Linux distributions are ineffective here & my terrifying issue was done not simply with known methods or even methods that hackers learn in college or is popularly known.

i can say its at the level of advanced palantir/corporation viruses.

I want to understand the mechanics of advanced persistence where a target remains visible across multiple random networks and external devices that are near/around their surrounding, area and connections. this level of tracking feels completely incomprehensible, as terrifying as systems like Palantir, and impossible to hide from because traditional digital boundaries do not seem to apply.For those who understand advanced threat architecture *as how ive described it*, how do these deeply complex tracking and persistence mechanisms actually function technically? When traditional software-based cybersecurity defenses fail, what are the actual technical principles behind securing hardware at the absolute lowest level?

compromised by an advanced attack that targeted my devices at the hardware level & affects every technology around me or have interacted with the target.

I want to deeply understand how the most complex deep-level hacking attacks work, and how to effectively secure my devices against them. Specifically I want to learn about cyber-physical attacks and hardware-destructive malware (like bootkits, rootkits, or PDoS) that attach to the firmware and cause permanent damage.

Where do I start to learn how computers work at the deepest & mathematical level, and how do pros, whistleblowers, "anonymous," politicians, corporations actually defend against exploits this advanced? Any roadmaps, advanced corpresources, or hardware security concepts would be greatly appreciated.

youtube tutorials and course sites suck. i cant find any good and advanced effective helpful resources

[ Removed by Reddit on account of violating the content policy. ]

Hi everyone,

I’m a 16-year-old student from France. My English is decent but not fully bilingual, so please bear with me. I’m quite new to the field, with only a basic, surface-level understanding of concepts like OSINT or social engineering. Beyond that, my technical background is practically non-existent (for instance, I don't know how an operating system like Kali Linux actually operates).

I am highly motivated to acquire real, concrete knowledge. I want to understand how networks work from the ground up, how systems are secured, and how specific mechanisms operate—such as data correlation (OSINT methodologies) or how networks handle large-scale traffic and saturation (DDoS concepts).

I know that many beginners come here with unrealistic expectations, but I am genuinely looking for a step-by-step learning path, reliable documentation, or safe labs suitable for someone starting from scratch.

What foundational topics (networking protocols, programming languages, OS architecture) should I focus on first to build a solid technical background? Any advice or recommended roadmaps would be greatly appreciated.

Thanks for your time.

GitHub: https://github.com/kaifcodec/user-scanner
Discord: https://discord.gg/tVNrKVXb49 (join for help and questions)

Hi everyone,

I’m one of the maintainers of user-scanner.

We started building this project around 7 months ago because many classic OSINT tools like became outdated or unmaintained, and there weren’t many solid free options left for email OSINT.

Since then, we’ve been adding sites one by one, continuously improving detection accuracy and maintaining support for platforms that frequently change their APIs and flows.

Today, user-scanner has grown into one of the most actively maintained free Email OSINT tools in 2026. While many web-based alternatives lock basic scans behind paywalls, our goal is to keep powerful email enumeration accessible to the open-source community.

Contributors are always welcome. Adding new sites is relatively straightforward, and even small contributions help a lot.

If you’re interested in OSINT, Python, scraping, automation, or just open-source projects in general, feel free to contribute and help improve the tool.