Nemesis Nemesis is an offensive data enrichment pipeline and operator support system. Built on Kubernetes with scale in mind, our goal with Nemesis was to create a centralized data processing platform that ingests data...
The post Nemesis: An offensive data enrichment pipeline appeared first on Penetration Testing Tools.
Shellz A script for generating common reverse shells fast and easy. Especially nice when in need of PowerShell and Python reverse shells, which can be a PITA getting correctly formatted. PowerShell revshells Shows username@computer.(domain),...
The post shells: Script for generating reverse shells appeared first on Penetration Testing Tools.
ADMiner ADMiner is an Active Directory audit tool that leverages cypher queries to crunch data from the BloodHound graph database (neo4j) and gives you a global overview of existing weaknesses through a web-based static report, including...
The post AD_Miner: Active Directory audit tool appeared first on Penetration Testing Tools.
Threagile Agile Threat Modeling Toolkit Threagile is an open-source toolkit for agile threat modeling: It allows to model architecture with its assets in an agile fashion as a YAML file directly inside the IDE. Upon...
The post threagile: Agile Threat Modeling Toolkit appeared first on Penetration Testing Tools.
B(l)utter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently, the application supports only Android libapp.so. Also, the application currently works only against recent Dart versions. Install This application uses the...
The post blutter: Flutter Mobile Application Reverse Engineering Tool appeared first on Penetration Testing Tools.
Supernova Supernova is an open-source tool that empowers users to securely encrypt and/or obfuscate their raw shellcode.Supernova supports various features beyond those typically found in a common shellcode encryptor tool. Features Supernova offers automatic...
The post Supernova: shellcode encryption tool appeared first on Penetration Testing Tools.
Kerbeus-BOF Beacon Object Files for Kerberos abuse. This is an implementation of some important features of the Rubeus project, written in C. The project features integration with the C2 frameworks Cobalt Strike and Havoc. Download git clone https://github.com/RalfHacker/Kerbeus-BOF.git Use...
The post Kerbeus-BOF: Beacon Object Files for Kerberos abuse appeared first on Penetration Testing Tools.
V’ger V’ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer, you’ve found Jupyter credentials, but don’t know what you...
The post V’ger: AI/ML Security in Your Arsenal appeared first on Penetration Testing Tools.
blackpill A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs Features The rootkit is composed of multiple modules (talking about Rust modules, not kernel modules): defense...
The post blackpill: A stealthy Linux rootkit made in Rust appeared first on Penetration Testing Tools.
AI Exploits The AI world has a security problem and it’s not just in the inputs given to LLMs such as ChatGPT. Based on research done by Protect AI and independent security experts on the Huntr Bug...
The post AI Exploits: A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities appeared first on Penetration Testing Tools.
Obfu[DE]scate Obfu[DE]scate is a Python tool designed to simplify the process of de-obfuscating and comparing two versions of an Android APK – even if the functions have been renamed as part of obfuscation. With...
The post Obfu[DE]scate: De-obfuscation and Comparison tool for Android APKs appeared first on Penetration Testing Tools.
AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. How it works AutoTimeline automates this workflow: Identify the correct volatility profile for the memory image. Runs the timeliner plugin against volatile memory dump using volatility. Runs the mftparser volatility...
The post autotimeliner: Automagically extract forensic timeline from volatile memory dump appeared first on Penetration Testing Tools.
STRIDE GPT STRIDE GPT is an AI-powered threat modeling tool that leverages OpenAI’s GPT models to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application...
The post STRIDE GPT: An AI-powered threat modeling tool appeared first on Penetration Testing Tools.
EDRaser EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated...
The post EDRaser: powerful tool for remotely deleting access logs, Windows event logs, databases appeared first on Penetration Testing Tools.
Deepfake Offensive Toolkit dot (aka Deepfake Offensive Toolkit) makes real-time, controllable deepfakes ready for virtual camera injection. dot is created for performing penetration testing against e.g. identity verification and video conferencing systems, for the use by...
The post dot: The Deepfake Offensive Toolkit appeared first on Penetration Testing Tools.
WPProbe is a fast and efficient WordPress plugin scanner that leverages REST API enumeration (?rest_route) to detect installed plugins without brute-force. Unlike traditional scanners that hammer websites with requests, WPProbe takes a smarter approach by querying the exposed REST API....
The post wpprobe: A fast WordPress plugin enumeration tool appeared first on Penetration Testing Tools.
Web Shell Analyzer Web shell analyzer is a cross-platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is...
The post Web Shell Analyzer: Web shell scanner and analyzer appeared first on Penetration Testing Tools.
Ghost Scheduled Task While using scheduled tasks as a means of persistence is not a novel approach, threat actors have employed various techniques to conceal their malicious tasks. A notable method involves removing the SD...
The post Ghost Scheduled Task: scheduled task for both persistence and lateral movement appeared first on Penetration Testing Tools.
Stifle Nearly a year ago, Jonas Knudsen (@Jonas_B_K) over at SpecterOps published a blog titled “ADCS ESC14 Abuse Technique”, covering a previously known technique for leveraging Active Directory Certificate Services (ADCS) for multiple types...
The post Stifle: .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS appeared first on Penetration Testing Tools.
SRUM-DUMP2 SRUM Dump extracts information from the System Resource Utilization Management Database and creates an Excel spreadsheet. The SRUM is one of the best sources for applications that have run on your system in...
The post SRUM Dump: extracts information from the System Resource Utilization Management Database appeared first on Penetration Testing Tools.
