MDE Kit MDE Kit’s objective is to help automate and empower your investigation, detection, prevention, and response capabilities leveraging the MDE API. MDE Kit leverages many of the available Microsoft Defender for Endpoint (MDE)...
The post MDE Kit: A PowerShell Module for Microsoft Defender for Endpoint appeared first on Penetration Testing Tools.
Hannibal Hannibal is a x64 Windows Agent written in fully position independent C (plus a tiny bit of C++). It is based off the Stardust template created by @C5pider. Use case Hannibal is intended to be...
The post Hannibal: x64 Windows Agent written in fully position independent C appeared first on Penetration Testing Tools.
HASH (HTTP Agnostic Software Honeypot) HASH is a framework for creating and launching low interactive honeypots. Why HASH? The main philosophy of HASH is to be easy to configure and flexible to mimic any...
The post HASH: framework for creating and launching low interactive honeypots appeared first on Penetration Testing Tools.
ChopChopGo ChopChopGo inspired by Chainsaw utilizes Sigma rules for forensics artifact recovery, enabling rapid and comprehensive analysis of logs and other artifacts to identify potential security incidents and threats on Linux. Features 🎯 Hunt...
The post ChopChopGo: Rapidly Search and Hunt through Linux Forensics Artifacts appeared first on Penetration Testing Tools.
Pytune Pytune is a post-exploitation tool for enrolling a fake device into Intune with mulitple platform support. Microsoft Intune is a cloud-based endpoint management solution designed to manage a variety of devices, including PCs...
The post Pytune: Weaponizing Microsoft Intune for Post-Exploitation appeared first on Penetration Testing Tools.
Pentest Muse Building an AI agent that can automate parts of pentesting jobs and provide live suggestions to pentesters. Requirements Python 3.12 or later Necessary Python packages as listed in requirements.txt OpenAI API key Modes...
The post Pentest Muse: Revolutionizing Penetration Testing with AI Automation appeared first on Penetration Testing Tools.
Forensic Tools forensictools is a toolkit designed for digital forensics, offering a wide array of tools. Its primary goal is to simplify the creation of a virtual environment for conducting forensic examinations. In addition to...
The post forensictools: A toolkit designed for digital forensics appeared first on Penetration Testing Tools.
XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap,...
The post xmap: performing Internet-wide IPv6 & IPv4 network research scanning appeared first on Penetration Testing Tools.
APT-Hunter APT-Hunter is a Threat Hunting tool for windows event logs which made by the purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the...
The post APT-Hunter: Threat Hunting tool for windows event logs appeared first on Penetration Testing Tools.
ldapx Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly. Usage Where: -f will apply Filter middlewares to all applicable requests -a will apply...
The post ldapx: inspect & transform all LDAP packets appeared first on Penetration Testing Tools.
OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your...
The post OSTE-Web-Log-Analyzer: automate the process of analyzing web server logs appeared first on Penetration Testing Tools.
LDAP Watchdog LDAP Watchdog is a tool designed to monitor and record changes in an LDAP directory in real time. It provides a mechanism to track and visualize modifications, additions, and removals to user...
The post LDAP Watchdog: monitor record changes in an LDAP directory in real-time appeared first on Penetration Testing Tools.
Git-Rotate Leveraging GitHub Actions for IP Rotation – for more information see the following blog post. The Sprayer and Catcher components are currently configured to target the Microsoft login portal and handle the response data. You’ll need to modify...
The post Git-Rotate: Bypassing IP Blocks with GitHub Actions appeared first on Penetration Testing Tools.
legba Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming fewer resources than similar...
The post legba: multiprotocol credentials bruteforcer / password sprayer and enumerator appeared first on Penetration Testing Tools.
MemProcFS Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to assist with the analysis workflow. Features: Auto-Install of MemProcFS, EvtxECmd, Elasticsearch, Kibana Auto-Update of MemProcFS, EvtxECmd (incl. Maps),...
The post MemProcFS Analyzer: Automated Forensic Analysis of Windows Memory Dumps appeared first on Penetration Testing Tools.
bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That’s all it does: no more and no less. # On your local machine...
The post bore: modern, simple TCP tunnel in Rust appeared first on Penetration Testing Tools.
Native Bypass CredGuard NativeBypassCredGuard is a tool designed to bypass Credential Guard by patching WDigest.dll using only NTAPI functions (exported by ntdll.dll). It is available in two flavours: C# and C++. The tool locates...
The post NativeBypassCredGuard: Bypass Credential Guard appeared first on Penetration Testing Tools.
MetaHub MetaHub is an open-source security tool for context-based security vulnerability management. It can automate the process of contextualizing and prioritizing security findings based on your environment and your needs, YOUR context. It focuses on...
The post metahub: open-source security tool for context-based security vulnerability management appeared first on Penetration Testing Tools.
Phantun A lightweight and fast UDP to TCP obfuscator. Phantun is a project that obfuscated UDP packets into TCP connections. It aims to achieve maximum performance with minimum processing and encapsulation overhead. It is...
The post phantun: lightweight and fast UDP to TCP obfuscator appeared first on Penetration Testing Tools.
Vanir: Missing Patch Scanner Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system. By default, Vanir pulls up-to-date CVEs from Open Source Vulnerabilities...
The post Vanir: Scalable and Accurate CVE Detection in Source Code appeared first on Penetration Testing Tools.
