IntelMQ is a solution for IT security teams (CERTs, CSIRTs, abuse departments,…) for collecting and processing security feeds (such as log files) using a message queuing protocol. It’s a community-driven initiative called IHAP (Incident Handling...
The post intelmq: collecting and processing security feeds appeared first on Penetration Testing Tools.
SuperMega – Cordyceps Implementation SuperMega is a shellcode loader by injecting it into genuine executables (.exe or .dll). The loader is programmed in C. The idea is that injecting shellcode nicely into a non-malicious...
The post SuperMega: Stealthily inject shellcode into an executable appeared first on Penetration Testing Tools.
Maester Monitor your Microsoft 365 tenant’s security configuration using Maester! Maester is an open source PowerShell-based test automation framework designed to help you monitor and maintain the security configuration of your Microsoft 365 environment. Why Maester?...
The post Maester: Monitor your Microsoft 365 tenant’s security configuration appeared first on Penetration Testing Tools.
simplewall A simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows Vista and...
The post simplewall: Simple tool to configure Windows Filtering Platform appeared first on Penetration Testing Tools.
VelLMes-AI-Honeypot The VelLMes read as (Vel-L-M-es, from Slavic deity Veles and LLMs) creates interactive, dynamic, and realistic honeypots through the use of Large Language Models (LLMs). The VelLMes tool was created from a research project to show the...
The post VelLMes-AI-Honeypot: Creates interactive, dynamic, and realistic honeypots appeared first on Penetration Testing Tools.
What the heck is a ferox anyway? Ferox is short for Ferric Oxide. Ferric Oxide, simply put, is rust. The name rustbuster was taken, so I decided on a variation. What’s it do tho?...
The post feroxbuster: fast, simple, recursive content discovery tool written in Rust appeared first on Penetration Testing Tools.
Intel Owl Do you want to get threat intelligence data about a file, an IP, or a domain? Do you want to get this kind of data from multiple sources at the same time using a...
The post Intel Owl: analyze files, domains, IPs in multiple ways appeared first on Penetration Testing Tools.
SCAGoat SCAGoat is an application for Software Composition Analysis (SCA) that focuses on vulnerable and compromised JAR dependencies used in development code, providing users with hands-on learning opportunities to understand potential attack scenarios. It...
The post SCAGoat : Damn Vulnerable SCA Application appeared first on Penetration Testing Tools.
MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. The msticpy package was initially developed to support Jupyter Notebooks authoring for Azure Sentinel. Many of the included tools can be used in other security scenarios for...
The post msticpy: Microsoft Threat Intelligence Security Tools appeared first on Penetration Testing Tools.
Kubernetes Goat The Kubernetes Goat designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security. 🏁 Scenarios Sensitive keys in codebases DIND (docker-in-docker) exploitation SSRF in the Kubernetes (K8S) world Container...
The post kubernetes goat: “Vulnerable by Design” Kubernetes Cluster appeared first on Penetration Testing Tools.
MORF – Mobile Reconnaissance Framework Mobile Reconnaissance Framework is a powerful, lightweight and platform-independent offensive mobile security tool designed to help hackers and developers identify and address sensitive information within mobile applications. It is...
The post MORF – Mobile Reconnaissance Framework appeared first on Penetration Testing Tools.
Runtime Mobile Security Runtime Mobile Security (RMS), powered by FRIDA, is a powerful web interface that helps you to manipulate Android Java Classes and Methods at Runtime. You can easily dump all the loaded classes...
The post Runtime Mobile Security: manipulate Android Java Classes and Methods at Runtime appeared first on Penetration Testing Tools.
Terrascan Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud-native infrastructure. Features 500+ Policies for security best practices Scanning of Terraform 12+ (HCL2) Scanning of Kubernetes YAML/JSON Support...
The post terrascan: Detect compliance and security violations across Infrastructure as Code appeared first on Penetration Testing Tools.
Ulfberht Shellcode loader Features : Indirect syscall. Module stomping. Load a stomped module using APC. Execute the payload with a direct jump (jmp) without creating a new thread. API hashing implemented using the DJB2...
The post Ulfberht: Shellcode loader appeared first on Penetration Testing Tools.
TrailShark The TrailShark Capture Utility seamlessly integrates with Wireshark, facilitating the capture of AWS CloudTrail logs directly into Wireshark for near-real-time analysis. This tool can be used for debugging AWS API calls and played...
The post TrailShark: Enhance AWS Security with Near-Real-Time Insights appeared first on Penetration Testing Tools.
INTERCEPT Stupidly easy to use, small footprint Policy as Code subsecond command-line scanner that leverages the power of the fastest multi-line search tool to scan your codebase. It can be used as a linter, guard...
The post INTERCEPT: Policy as Code Static Analysis Auditing appeared first on Penetration Testing Tools.
Snaffler Snaffler is a tool for pentesters to help find delicious candy needles (creds mostly, but it’s flexible) in a bunch of horrible boring haystacks (a massive Windows/AD environment). It might also be useful for other...
The post Snaffler: tool for pentesters to help find delicious candy needles appeared first on Penetration Testing Tools.
Genzai Genzai helps you identify IoT or Internet of Things related dashboards across a single or set of targets provided as an input and furthermore scan them for default password issues and potential vulnerabilities...
The post Genzai: The IoT Security Toolkit appeared first on Penetration Testing Tools.
Responder an LLMNR, NBT-NS, and MDNS poisoner. It will answer to specific NBT-NS (NetBIOS Name Service) queries based on their name suffix (see: http://support.microsoft.com/kb/163409). By default, the tool will only answer to File Server Service request, which...
The post Responder: LLMNR/NBT-NS/mDNS Poisoner and NTLMv1/2 Relay appeared first on Penetration Testing Tools.
VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. VECTR provides the ability to create assessment groups, which...
The post VECTR: tracking of your red and blue team testing activities appeared first on Penetration Testing Tools.
