Sirius Scan Sirius is the first truly open-source general purpose vulnerability scanner. Today, the information security community remains the best and most expedient source for cybersecurity intelligence. The community itself regularly outperforms commercial vendors....
The post Sirius Scan: open-source general purpose vulnerability scanner appeared first on Penetration Testing Tools.
GPOddity The GPOddity project aims at automating GPO attack vectors through NTLM relaying (and more). For more details regarding the attack and a demonstration of how to use the tool, see the associated article...
The post GPOddity: automating GPO attack vectors through NTLM relaying appeared first on Penetration Testing Tools.
DavRelayUp A quick and dirty port of KrbRelayUp with modifications to allow for NTLM relay from webdav to LDAP in order to streamline the abuse of the following attack primitive: (Optional) New machine account creation (New-MachineAccount)...
The post DavRelayUp: A universal no-fix local privilege escalation in domain-joined windows workstations appeared first on Penetration Testing Tools.
eBPFShield Welcome to eBPFShield, a powerful and intuitive security tool for monitoring and protecting your servers. Featuring both IP-Intelligence and DNS monitoring capabilities, eBPFShield utilizes the power of ebpf and python to provide real-time monitoring and actionable insights...
The post eBPFShield: powerful IP-intelligence and DNS monitoring tool appeared first on Penetration Testing Tools.
Cloud edge Lookup an IP to find the cloud provider and other details based on the provider’s published JSON data Cloud edge is a recon tool focused on exploring cloud service providers. It can...
The post Cloud edge: Lookup an IP to find the cloud provider and other details appeared first on Penetration Testing Tools.
Red Canary Mac Monitor Red Canary Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research, malware triage, and system troubleshooting. Harnessing Apple Endpoint Security (ES), it collects and enriches system...
The post Red Canary Mac Monitor: advanced, stand-alone system monitoring tool tailor-made for macOS security research appeared first on Penetration Testing Tools.
DeepSecrets – a better tool for secret scanning Yet another tool – why? Existing tools don’t really “understand” code. Instead, they mostly parse texts. DeepSecrets expands classic regex-search approaches with semantic analysis, dangerous variable...
The post deepsecrets: a better tool for secret scanning appeared first on Penetration Testing Tools.
GCPGoat: A Damn Vulnerable GCP Infrastructure Compromising an organization’s cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an...
The post GCPGoat: A Damn Vulnerable GCP Infrastructure appeared first on Penetration Testing Tools.
Slack Jack – Slack Bot Token Abuse Slack Jack is a penetration testing tool designed for ethical hacking and security testing purposes. It allows you to hijack a Slack bot using its token (e.g.,...
The post Slack Jack: Bot Exploitation for Penetration Testers appeared first on Penetration Testing Tools.
VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED (Vault Exploit Defense)-eBPF leverages eBPF (extended Berkeley Packet Filter) to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an...
The post ved-ebpf: Kernel Exploit and Rootkit Detection using eBPF appeared first on Penetration Testing Tools.
What is Hiphp? The HIPHP BackDoor is an open-source tool that allows for remote control of websites utilizing the PHP programming language via the HTTP/HTTPS protocol. By utilizing the POST/GET method on port 80,...
The post hiphp: create a BackDoor to control PHP-based sites appeared first on Penetration Testing Tools.
OSTE-Meta-Scanner This project aims to simplify the field of Dynamic Application Security Testing. The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, OWASP ZAP, Nuclei,...
The post OSTE-Meta-Scanner: A comprehensive web vulnerability scanner appeared first on Penetration Testing Tools.
SiCat – The useful exploit finder SiCat is an advanced exploit search tool designed to identify and gather information about exploits from both open sources and local repositories effectively. With a focus on cybersecurity,...
The post sicat: an advanced exploit search tool appeared first on Penetration Testing Tools.
Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs (as most fuzzers do) but instead uses a so-called generator application to produce an input for our fuzzing target....
The post fuzztruction: an academic prototype of a fuzzer appeared first on Penetration Testing Tools.
KRBJack This tool can be used to abuse the dangerous ZONE_UPDATE_UNSECURE flag on DNS main domain zone in an Active Directory. This flag when set allows anyone unauthenticated to update, add and remove DNS records anonymously....
The post krbjack: A Kerberos AP-REQ hijacking tool appeared first on Penetration Testing Tools.
rayder Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to define a series of modules in a YAML file, each consisting of commands to be...
The post rayder: A lightweight tool for orchestrating and organizing your command-line workflows appeared first on Penetration Testing Tools.
Frelatage Frelatage is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers, including AFL/AFL++, Atheris, and PythonFuzz. The main purpose of the project is...
The post Frelatage: coverage-based Python fuzzing library appeared first on Penetration Testing Tools.
Indetectables Toolkit This tool compilation is carefully crafted to be useful both for beginners and veterans of the malware analysis world. It has also proven useful for people trying their luck at the cracking...
The post toolkit: The essential toolkit for reversing, malware analysis, and cracking appeared first on Penetration Testing Tools.
FirmWire FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images. FirmWire is the result of a multi-year, cross-university research...
The post FirmWire: full-system baseband firmware analysis platform appeared first on Penetration Testing Tools.
Argus This repo contains the code for our USENIX Security ’23 paper “ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions”. Argus is a comprehensive security analysis tool specifically designed...
The post Argus: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions appeared first on Penetration Testing Tools.
