The open-source tool lets penetration testers gather credentials by convincing targets to open a Microsoft WCX file. A new open-source penetration testing tool, dubbed Firework, will let pen testers collect sensitive data by tricking their targets into opening Microsoft WCX files.

Read full news article on Dark Reading