S3Scanner A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Custom The tool takes in a list of bucket names to check. Found S3 buckets...
The post S3Scanner: Scan for open S3 buckets and dump appeared first on Penetration Testing Tools.
Knock Knock is a Python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan for DNS zone transfer and to try to bypass the wildcard DNS...
The post Knock: enumerate subdomains on a target domain appeared first on Penetration Testing Tools.
pwnobd Offensive cybersecurity toolkit for vulnerability analysis and penetration testing of OBD-II devices. Adding new functionality Most functionality is dynamically registered onto pwnobd through the use of decorators. Attacks Located in src/pwnobd/modules/attacks/. See...
The post pwnobd: Offensive cybersecurity toolkit for vulnerability analysis and penetration testing of OBD-II devices appeared first on Penetration Testing Tools.
cemu Writing assembly is fun. Assembly is the lowest language (humanly understandable) available to communicate with computers, and is crucial to understand the internal mechanisms of any machine. Unfortunately, setting up an environment to...
The post cemu: lightweight multi-architecture assembly playground appeared first on Penetration Testing Tools.
What is BinCAT? A static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA. It features: value analysis (registers and memory) taint analysis type reconstruction and propagation backward and forward analysis In action...
The post bincat: Binary code static analyser, with IDA integration appeared first on Penetration Testing Tools.
What is Traceeshark? Traceeshark brings the world of Linux runtime security monitoring and advanced system tracing to the familiar and ubiquitous network analysis tool Wireshark. Using Traceeshark, you can load Tracee captures in JSON format into...
The post Traceeshark: Linux Runtime Security Monitoring Meets Wireshark appeared first on Penetration Testing Tools.
Brakeman Brakeman is an open-source static analysis tool that checks Ruby on Rails applications for security vulnerabilities. It can detect: Possibly unescaped model attributes or parameters in views (Cross-Site Scripting) Bad string interpolation in...
The post Brakeman: A static analysis security vulnerability scanner for Ruby on Rails applications appeared first on Penetration Testing Tools.
AIL framework AIL framework – Framework for Analysis of Information Leaks AIL is a modular framework to analyse potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured...
The post AIL framework: Analysis Information Leak framework appeared first on Penetration Testing Tools.
Blackdagger Blackdagger represents a significant advancement in automation technology, offering a comprehensive solution for orchestrating complex workflows in DevOps, DevSecOps, MLOps, MLSecOps, and Continuous Automated Red Teaming (CART) environments. At its core, Blackdagger simplifies...
The post blackdagger: Revolutionizing Automation in DevOps, DevSecOps, and Beyond appeared first on Penetration Testing Tools.
Clair Clair is an open-source project for the static analysis of vulnerabilities in application containers (currently including appc and docker). In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the...
The post clair: Vulnerability Static Analysis for Containers appeared first on Penetration Testing Tools.
HookCase HookCase is a tool for debugging and reverse engineering applications on macOS (aka OS X), and the operating system itself. It re-implements and extends Apple’s DYLD_INSERT_LIBRARIES functionality. It can be used to hook any method...
The post HookCase: Tool for reverse engineering macOS/OS X appeared first on Penetration Testing Tools.
MACOBOX The all-in-one hacking toolbox for hardware penetration testing. MACOBOX is designed to simplify and enhance hardware penetration testing by providing a comprehensive toolset for analyzing and extracting firmware from various hardware interfaces. With...
The post MACOBOX: The all-in-one hacking toolbox for hardware penetration testing appeared first on Penetration Testing Tools.
OneGadget When playing ctf pwn challenges we usually need the one-gadget RCE (remote code execution), which leads to call execve(‘/bin/sh’, NULL, NULL). This gem provides such gadgets finder, no need to use objdump or IDA-pro...
The post OneGadget: The best tool for finding one gadget RCE appeared first on Penetration Testing Tools.
Docker Security Playground Docker Security Playground is an application that allows you to: Create a network and network security scenarios, in order to understand network protocols, rules, and security issues by installing DSP in...
The post Docker Security Playground: A Microservices-based framework for the study of network security appeared first on Penetration Testing Tools.
SkyScalpel SkyScalpel is an open-source framework for JSON policy parsing, obfuscation, deobfuscation, and detection in cloud environments. It provides flexible and highly configurable mechanisms to handle JSON-level obfuscation, IAM policy transformations, and the detection...
The post SkyScalpel: A Swiss Army Knife for JSON Policy in the Cloud appeared first on Penetration Testing Tools.
Netis Packet Agent Netis Packet Agent is an open-source project to deal with such a situation: it captures packets on Machine A but has to use them on Machine B. This case is very common when...
The post packet agent: toolset for network packet capture, forwarding and analysis appeared first on Penetration Testing Tools.
sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted...
The post sniffglue: Secure multithreaded packet sniffer appeared first on Penetration Testing Tools.
Matildapp In our modern, interconnected world, the concept of Web3, also known as the decentralized web, represents the next significant shift in Internet technology. Web3, underpinned by blockchain technology and smart contracts, offers unprecedented...
The post Matildapp: A framework for Web3 environments in the field of cybersecurity and pentesting appeared first on Penetration Testing Tools.
PowerHub PowerHub is a web application which aids a pentester in transferring files, in particular, code which may get flagged by endpoint protection. During an engagement where you have a test client available, one...
The post PowerHub: bypassing endpoint protection and application whitelisting appeared first on Penetration Testing Tools.
Miteru Miteru is an experimental phishing kit detection tool. How it works It collects phishing suspicious URLs from the following feeds: urlscan.io certstream-suspicious feed OpenPhish feed via urlscan.io PhishTank feed via urlscan.io It checks...
The post Miteru: An experimental phishing kit detection tool appeared first on Penetration Testing Tools.
