Group3r Like its ancestors, Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Policy and to identify exploitable misconfigurations in the same. It does this by...
The post Group3r: Find vulnerabilities in AD Group Policy appeared first on Penetration Testing Tools.
Eclipse Eclipse is a PoC that performs Activation Context hijack to load and run an arbitrary DLL in any desired process. Initially, this technique was created as a more flexible alternative to DLL Sideloading + DLL...
The post Eclipse: Hijacking Activation Context for Arbitrary DLL Injection appeared first on Penetration Testing Tools.
hcltm Threat Modeling with HCL Overview There are many different ways in which a threat model can be documented. From a simple text file to more in-depth word documents, to fully instrumented threat models...
The post hcltm: Threat Modeling with HCL appeared first on Penetration Testing Tools.
Cloak Cloak is a pluggable transport that works alongside traditional proxy tools like OpenVPN to evade deep-packet-inspection-based censorship. Cloak is not a standalone proxy program. Rather, it works by masquerading proxy tool’s traffic as normal...
The post Cloak: evade deep-packet-inspection based censorship appeared first on Penetration Testing Tools.
NachoVPN NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server. It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by...
The post NachoVPN: Popping SSL-VPNs with a Rogue Server appeared first on Penetration Testing Tools.
Karton Distributed malware processing framework based on Python, Redis, and MinIO. The idea Karton is a robust framework for creating flexible and lightweight malware analysis backends. It can be used to connect malware analysis systems into a...
The post karton: Distributed malware processing framework appeared first on Penetration Testing Tools.
Hayabusa Hayabusa is a Windows event log fast forensics timeline generator and threat hunting tool created by the Yamato Security group in Japan. Hayabusa means “peregrine falcon” in Japanese and was chosen as peregrine falcons are the fastest animal in the...
The post hayabusa: Windows event log fast forensics timeline generator and threat hunting tool appeared first on Penetration Testing Tools.
KrbRelayEx KrbRelayEx is a tool designed for performing Man-in-the-Middle (MitM) attacks by relaying Kerberos AP-REQ tickets. It listens for incoming SMB connections and forwards the AP-REQ to the target host, enabling access to SMB...
The post KrbRelayEx: Kerberos Relay and Forwarder for (Fake) SMB MiTM Server appeared first on Penetration Testing Tools.
subparse Subparse is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files and present the information found during the parsing in...
The post subparse: Modular malware analysis artifact collection and correlation framework appeared first on Penetration Testing Tools.
Spyre Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is the easy operationalization of YARA rules and other indicators of...
The post spyre: simple YARA-based IOC scanner appeared first on Penetration Testing Tools.
FaceGSM FaceGSM designed for performing targeted adversarial attacks using the FGSM (Fast Gradient Sign Method) in Facial Recognition Embedding Model. FaceGSM revolutionizes security testing with a suite of innovative features, including: Static – Takes static images as input for FaceGSM. Capture – Takes image captured by...
The post FaceGSM: Targeted Adversarial Attack using FGSM Method appeared first on Penetration Testing Tools.
THE YARALYZER Visually inspect all of the regex matches (and their sexier, more cloak-and-dagger cousins, the YARA matches) found in binary data and/or text. See what happens when you force various character encodings upon those...
The post THE YARALYZER: Visually inspect YARA and regex matches found in both binary and text data appeared first on Penetration Testing Tools.
SMERSH Smersh is a pentest-oriented collaborative tool used to track the progress of your company’s missions and generate rapport. Architecture SMERSH uses many docker containers in its architecture, which means you have to...
The post Smersh: pentest-oriented collaborative tool appeared first on Penetration Testing Tools.
GPOHunter – Active Directory Group Policy Security Analyzer GPOHunter is a comprehensive tool designed to analyze and identify security misconfigurations in Active Directory Group Policy Objects (GPOs). It automates security checks and provides detailed...
The post GPOHunter: Active Directory Group Policy Security Analyzer appeared first on Penetration Testing Tools.
CVE Prioritizer Tool CVE_Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, and CISA’s Known Exploited Vulnerabilities. It provides valuable insights into the likelihood of exploitation and the potential impact of...
The post CVE_Prioritizer: Streamline vulnerability patching with CVSS, EPSS, and CISA’s Known Exploited Vulnerabilities appeared first on Penetration Testing Tools.
bettercap bettercap is a powerful, easily extensible, and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they...
The post bettercap: Swiss army knife for network attacks and monitoring appeared first on Penetration Testing Tools.
KexecDDPlus This proof-of-concept is the result of a research project that aimed at extending the work of @floesen_ on the KsecDD Windows driver. It relies on Server Silos to access the KsecDD driver directly, without having...
The post KexecDDPlus: Exploiting the KsecDD Windows driver appeared first on Penetration Testing Tools.
Cloudlist Cloudlist is a multi-cloud tool for getting Assets (Hostnames, IP Addresses) from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...
The post cloudlist: listing Assets from multiple Cloud Providers appeared first on Penetration Testing Tools.
Power Pwn Power Pwn is an offensive and defensive security toolset for Microsoft Power Platform. Disclaimer: These materials are presented from an attacker’s perspective to raise awareness of the risks of underestimating the security...
The post Power Pwn: An offensive and defensive security toolset for Microsoft 365 Power Platform appeared first on Penetration Testing Tools.
Linux Process Injection This repository contains proof-of-concept implementations of various Linux process injection primitives. This code is meant to provide simple examples of injection techniques in action, allowing defenders to understand how they work...
The post Linux Process Injection: proof-of-concept implementations of various Linux process injection primitives appeared first on Penetration Testing Tools.
