SharpExclusionFinder This C# program finds Windows Defender folder exclusions using Windows Defender through its command-line tool (MpCmdRun.exe). The program processes directories recursively, with configurable depth and thread usage, and outputs information about exclusions and scan progress....
The post SharpExclusionFinder: finds Windows Defender folder exclusions appeared first on Penetration Testing Tools.
Starkiller Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. Multi-user GUI application for interfacing with the Empire C2 server from any computer. Starkiller represents a huge step forward...
The post Starkiller: Frontend for PowerShell Empire appeared first on Penetration Testing Tools.
Venator – Threat Detection Platform A flexible detection system that simplifies rule management and deployment with K8s CronJob and Helm. Venator is optimized for Kubernetes deployment but is flexible enough to run standalone or...
The post venator: A flexible threat detection platform appeared first on Penetration Testing Tools.
What is DalFox DalFox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed...
The post dalfox: Parameter Analysis and XSS Scanning tool appeared first on Penetration Testing Tools.
IllusiveFog IllusiveFog is an implant kit for Microsoft Windows-based networks for long-term stealthy access and recon. IllusiveFog is designed for highly covert & stealthy operations, because of this reason features are kept limited and...
The post IllusiveFog: Windows Administrator level Implant appeared first on Penetration Testing Tools.
interactsh Interactsh is an Open-Source Solution for Out of band Data Extraction, A tool designed to detect bugs that cause external interactions, For example – Blind SQLi, Blind CMDi, SSRF, etc. Features DNS/HTTP/SMTP Interaction...
The post interactsh: Open-Source Solution for Out of band Data Extraction appeared first on Penetration Testing Tools.
scared scared is a library that aims to provide tools to achieve side-channel analysis. It provides pretty high-level APIs, and ready-to-use tools to quickly run classic CPA, DPA, … leakage, and reverse analysis. It...
The post scared: side-channel analysis framework appeared first on Penetration Testing Tools.
FaceDancer FaceDancer is an exploitation tool aimed at creating hijackable, proxy-based DLLs. FaceDancer performs two main functions: Recon: Scans a given DLL to create the export definition file for proxying. Attack: Creates a malicious...
The post FaceDancer: An exploitation tool aimed at creating hijackable, proxy-based DLLs appeared first on Penetration Testing Tools.
CloudShovel CloudShovel is a tool designed to search for sensitive information within public or private Amazon Machine Images (AMIs). It automates the process of launching instances from target AMIs, mounting their volumes, and scanning...
The post CloudShovel: scanning public or private AMIs for sensitive files and secrets appeared first on Penetration Testing Tools.
Network Flight Recorder NFR is a lightweight application which processes network traffic using the AlphaSOC Analytics Engine. NFR can monitor log files on disk (e.g. Microsoft DNS debug logs, Bro IDS logs) or run as a network...
The post Network Flight Recorder: score network traffic and flag anomalies appeared first on Penetration Testing Tools.
Crawl4AI Crawl4AI simplifies asynchronous web crawling and data extraction, making it accessible for large language models (LLMs) and AI applications. Feature 🆓 Completely free and open-source 🚀 Blazing fast performance, outperforming many paid services...
The post crawl4ai: Open-source LLM Friendly Web Crawler & Scrapper appeared first on Penetration Testing Tools.
themis Themis is an open-source high-level cryptographic services library for mobile and server platforms, which provides secure data exchange and storage. Themis provides four important cryptographic services: Secure Message: a simple encrypted messaging...
The post themis: open-source high-level cryptographic services library appeared first on Penetration Testing Tools.
capa capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the...
The post capa: identify capabilities in executable files appeared first on Penetration Testing Tools.
WhoYouCalling Monitors network activity made by a process through the use of Windows Event Tracing (ETW) and Full Packet Capture (FPC). Filters a generated .pcap file with BPF based on the detected network activity made by...
The post WhoYouCalling: Effortless Process Network Monitoring with ETW and BPF appeared first on Penetration Testing Tools.
sslscan sslscan tests SSL/TLS-enabled services to discover supported cipher suites. This is a fork of ioerror’s version of sslscan. Changes are as follows: Highlight SSLv2 and SSLv3 ciphers in output. Highlight CBC ciphers on SSLv3 (POODLE). Highlight...
The post sslscan: tests SSL/TLS enabled services to discover supported cipher suites appeared first on Penetration Testing Tools.
Bopscrk Bopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists. Included in BlackArch Linux pentesting distribution and Rawsec’s Cybersecurity Inventory since August 2019. The first idea was inspired by Cupp and Crunch. We could say...
The post bopscrk: generate smart and powerful wordlists appeared first on Penetration Testing Tools.
AuditForge AuditForge (PwnDoc fork) is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to search...
The post auditforge: A pentest reporting application appeared first on Penetration Testing Tools.
What is Acra Acra helps you easily secure your databases in distributed, microservice-rich environments. It allows you to selectively encrypt sensitive records with strong multi-layer cryptography, detect potential intrusions and SQL injections and cryptographically compartmentalize...
The post Acra: database protection suite appeared first on Penetration Testing Tools.
Dr. Memory: the memory debugger Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory (including outside of allocated heap units...
The post drmemory: Memory Debugger for Windows, Linux, Mac, and Android appeared first on Penetration Testing Tools.
EDR-Antivirus-Bypass-to-Gain-Shell-Access This repository contains a proof-of-concept (PoC) for bypassing EDR and antivirus solutions using a memory injection technique. The code executes shellcode that spawns a reverse shell, successfully evading detection by various security mechanisms. This project...
The post EDR & Antivirus Bypass to Gain Shell Access appeared first on Penetration Testing Tools.
