VulnerableCode VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current. It is made by the FOSS community to improve and secure...
The post VulnerableCode: free and open vulnerabilities database and the packages they impact appeared first on Penetration Testing Tools.
Mobile Security Framework Mobile Security Framework (MobSF) is an intelligent, all-in-one open-source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static and dynamic analysis. It can be used for effective and fast security...
The post Mobile Security Framework (MobSF): Automated mobile application pen-testing framework appeared first on Penetration Testing Tools.
Extract VMK of BitLocker volume with TPMAndPIN protector and knowing PIN Technic to extract VMK from the bitlocker volume that TPM protects are already documented in different publications. This GitHub repo gives a toolset...
The post Extract VMK of BitLocker volume with TPMAndPIN protector and knowing PIN appeared first on Penetration Testing Tools.
EAPHammer EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, the focus is...
The post eaphammer: evil twin attacks against WPA2-Enterprise networks appeared first on Penetration Testing Tools.
Slack Watchman Slack Watchman is an application that uses the Slack API to look for potentially sensitive data exposed in your Slack workspaces. Features It searches for, and reports back on: Externally shared...
The post slack watchman: Monitoring you Slack workspaces for sensitive information appeared first on Penetration Testing Tools.
SharpExclusionFinder This C# program finds Windows Defender folder exclusions using Windows Defender through its command-line tool (MpCmdRun.exe). The program processes directories recursively, with configurable depth and thread usage, and outputs information about exclusions and scan progress....
The post SharpExclusionFinder: finds Windows Defender folder exclusions appeared first on Penetration Testing Tools.
Starkiller Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. Multi-user GUI application for interfacing with the Empire C2 server from any computer. Starkiller represents a huge step forward...
The post Starkiller: Frontend for PowerShell Empire appeared first on Penetration Testing Tools.
Venator – Threat Detection Platform A flexible detection system that simplifies rule management and deployment with K8s CronJob and Helm. Venator is optimized for Kubernetes deployment but is flexible enough to run standalone or...
The post venator: A flexible threat detection platform appeared first on Penetration Testing Tools.
What is DalFox DalFox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed...
The post dalfox: Parameter Analysis and XSS Scanning tool appeared first on Penetration Testing Tools.
IllusiveFog IllusiveFog is an implant kit for Microsoft Windows-based networks for long-term stealthy access and recon. IllusiveFog is designed for highly covert & stealthy operations, because of this reason features are kept limited and...
The post IllusiveFog: Windows Administrator level Implant appeared first on Penetration Testing Tools.
interactsh Interactsh is an Open-Source Solution for Out of band Data Extraction, A tool designed to detect bugs that cause external interactions, For example – Blind SQLi, Blind CMDi, SSRF, etc. Features DNS/HTTP/SMTP Interaction...
The post interactsh: Open-Source Solution for Out of band Data Extraction appeared first on Penetration Testing Tools.
scared scared is a library that aims to provide tools to achieve side-channel analysis. It provides pretty high-level APIs, and ready-to-use tools to quickly run classic CPA, DPA, … leakage, and reverse analysis. It...
The post scared: side-channel analysis framework appeared first on Penetration Testing Tools.
FaceDancer FaceDancer is an exploitation tool aimed at creating hijackable, proxy-based DLLs. FaceDancer performs two main functions: Recon: Scans a given DLL to create the export definition file for proxying. Attack: Creates a malicious...
The post FaceDancer: An exploitation tool aimed at creating hijackable, proxy-based DLLs appeared first on Penetration Testing Tools.
CloudShovel CloudShovel is a tool designed to search for sensitive information within public or private Amazon Machine Images (AMIs). It automates the process of launching instances from target AMIs, mounting their volumes, and scanning...
The post CloudShovel: scanning public or private AMIs for sensitive files and secrets appeared first on Penetration Testing Tools.
Network Flight Recorder NFR is a lightweight application which processes network traffic using the AlphaSOC Analytics Engine. NFR can monitor log files on disk (e.g. Microsoft DNS debug logs, Bro IDS logs) or run as a network...
The post Network Flight Recorder: score network traffic and flag anomalies appeared first on Penetration Testing Tools.
Crawl4AI Crawl4AI simplifies asynchronous web crawling and data extraction, making it accessible for large language models (LLMs) and AI applications. Feature 🆓 Completely free and open-source 🚀 Blazing fast performance, outperforming many paid services...
The post crawl4ai: Open-source LLM Friendly Web Crawler & Scrapper appeared first on Penetration Testing Tools.
themis Themis is an open-source high-level cryptographic services library for mobile and server platforms, which provides secure data exchange and storage. Themis provides four important cryptographic services: Secure Message: a simple encrypted messaging...
The post themis: open-source high-level cryptographic services library appeared first on Penetration Testing Tools.
capa capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the...
The post capa: identify capabilities in executable files appeared first on Penetration Testing Tools.
WhoYouCalling Monitors network activity made by a process through the use of Windows Event Tracing (ETW) and Full Packet Capture (FPC). Filters a generated .pcap file with BPF based on the detected network activity made by...
The post WhoYouCalling: Effortless Process Network Monitoring with ETW and BPF appeared first on Penetration Testing Tools.
sslscan sslscan tests SSL/TLS-enabled services to discover supported cipher suites. This is a fork of ioerror’s version of sslscan. Changes are as follows: Highlight SSLv2 and SSLv3 ciphers in output. Highlight CBC ciphers on SSLv3 (POODLE). Highlight...
The post sslscan: tests SSL/TLS enabled services to discover supported cipher suites appeared first on Penetration Testing Tools.
