;
;

Darknet – Hacking Tools, Hacker News & Cyber Security

Darknet.org.uk is a cybersecurity site online since 2000. It covers security tools, technical research and hacking news, alongside an archive of earlier posts.

numbat – Endpoint Visibility and Forensics for AI Coding Agents

numbat monitors Claude Code, Codex and other AI coding agents and rebuilds their sessions. Tested on a staged session; its blocking is opt-in and n...
Posted on 12 October 2026 | 11:15 am

Response Overview and Colonel Clustered – Grouping Burp Responses by Content

Two Burp Suite extensions that group responses by content: Response Overview, a BApp with a threshold you set, and Colonel Clustered, which picks i...
Posted on 5 October 2026 | 12:33 pm

http-terminator – AI-Assisted HTTP Request-Smuggling Discovery

http-terminator is PortSwigger's AI pipeline for discovering HTTP request-smuggling bugs. Which stages run, its dependencies, and its testing limits.
Posted on 28 September 2026 | 7:09 am

Hash Identifier Tools – Command-Line Password Hash Identification

hashID and Name-That-Hash tested against current password formats. Both miss bcrypt's $2b$ prefix; only Name-That-Hash recognises Argon2id.
Posted on 21 September 2026 | 1:13 pm

whitelist-bypass – WebRTC Tunnels Through Video-Calling Platforms

whitelist-bypass tunnels traffic through commercial video calls, for networks that allow only approved domains. How its two tunnels work, and the c...
Posted on 14 September 2026 | 7:53 pm

WRAITH – Browser Hooking and Blind XSS Page Mirroring

WRAITH combines BeEF-style browser hooks with blind-XSS capture and a credentialed Page Mirror. Tested locally, with its limits examined.
Posted on 7 September 2026 | 7:58 am

Praetorian – Offensive Security Tools Built Around Portable Go Workflows

Praetorian's Go security tools consolidate established offensive workflows, with portable binaries, direct pipelines and a partial shared SDK.
Posted on 31 August 2026 | 7:40 am

AI IR Overlay – Incident Response Specification for AI Agents

AI IR Overlay specifies containment for agents using valid credentials, with a working kill-switch contract and an admitted gap when no SOC is staf...
Posted on 28 August 2026 | 6:35 am

MSSQLand – Lightweight MS-SQL Interaction Tool for Lateral Movement and Post-Exploitation

MSSQLand enables red teams to interact with MS-SQL servers and linked instances in restricted environments without complex T-SQL queries. Assembly-...
Posted on 24 March 2026 | 1:00 am

Credential Stuffing in 2025 – How Combolists, Infostealers and Account Takeover Became an Industry

Credential stuffing drove 22% of all breaches in 2025. How combolists, infostealers and ATO tooling are fuelling enterprise account takeover at scale
Posted on 11 March 2026 | 1:00 am