SkyScalpel SkyScalpel is an open-source framework for JSON policy parsing, obfuscation, deobfuscation, and detection in cloud environments. It provides flexible and highly configurable mechanisms to handle JSON-level obfuscation, IAM policy transformations, and the detection...
The post SkyScalpel: A Swiss Army Knife for JSON Policy in the Cloud appeared first on Penetration Testing Tools.
Netis Packet Agent Netis Packet Agent is an open-source project to deal with such a situation: it captures packets on Machine A but has to use them on Machine B. This case is very common when...
The post packet agent: toolset for network packet capture, forwarding and analysis appeared first on Penetration Testing Tools.
sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted...
The post sniffglue: Secure multithreaded packet sniffer appeared first on Penetration Testing Tools.
Matildapp In our modern, interconnected world, the concept of Web3, also known as the decentralized web, represents the next significant shift in Internet technology. Web3, underpinned by blockchain technology and smart contracts, offers unprecedented...
The post Matildapp: A framework for Web3 environments in the field of cybersecurity and pentesting appeared first on Penetration Testing Tools.
PowerHub PowerHub is a web application which aids a pentester in transferring files, in particular, code which may get flagged by endpoint protection. During an engagement where you have a test client available, one...
The post PowerHub: bypassing endpoint protection and application whitelisting appeared first on Penetration Testing Tools.
Miteru Miteru is an experimental phishing kit detection tool. How it works It collects phishing suspicious URLs from the following feeds: urlscan.io certstream-suspicious feed OpenPhish feed via urlscan.io PhishTank feed via urlscan.io It checks...
The post Miteru: An experimental phishing kit detection tool appeared first on Penetration Testing Tools.
Cloud Console Cartographer Released at Black Hat Asia on April 18, 2024, Cloud Console Cartographer is a framework for condensing groupings of cloud events (e.g. CloudTrail logs) and mapping them to the original user...
The post Cloud Console Cartographer: Mapping the Cloud for Defenders appeared first on Penetration Testing Tools.
Obfuscar Obfuscar is a basic obfuscator for .NET assemblies. It uses massive overloading to rename metadata in .NET assemblies (including the names of methods, properties, events, fields, types, and namespaces) to a minimal set,...
The post obfuscar: Open source obfuscation tool for .NET assemblies appeared first on Penetration Testing Tools.
Splunk Attack Range Purpose The Attack Range solves two main challenges in the development of detections. First, it allows the user to quickly build a small lab infrastructure as close as possible to your...
The post attack range: create vulnerable instrumented local or cloud environments appeared first on Penetration Testing Tools.
Android BugBazaar: Your mobile appsec playground to Explore, Exploit, Excel BugBazaar is a comprehensive mobile application intentionally designed to be vulnerable, featuring over 30 vulnerabilities. Developed to emulate real-world scenarios, it includes more than...
The post BugBazaar: Mobile penetration testing on the Android platform appeared first on Penetration Testing Tools.
GDB dashboard Modular visual interface for GDB in Python. This comes as a standalone single-file .gdbinit which, among the other things, enables a configurable dashboard showing the most relevant information during the program execution. Its main...
The post gdb dashboard: Modular visual interface for GDB in Python appeared first on Penetration Testing Tools.
sechub It enables the operation and integration of various security tools with one central API in a development environment. SecHub server orchestrates different security tools by one API layer. Users call SecHub Server but...
The post sechub: one central and easy way to use different security tools with one API/Client appeared first on Penetration Testing Tools.
msInvader msInvader is an adversary simulation tool built for blue teams, designed to simulate adversary techniques within M365 and Azure environments. Its purpose is to generate attack telemetry that aids teams in building, testing,...
The post msInvader: M365/Azure adversary simulation tool appeared first on Penetration Testing Tools.
GTIRB The GrammaTech Intermediate Representation for Binaries (GTIRB) is a machine code analysis and rewriting data structure. It is intended to facilitate the communication of binary IR between programs performing binary disassembly, analysis, transformation,...
The post gtirb: Intermediate Representation for Binary analysis and transformation appeared first on Penetration Testing Tools.
IntelMQ is a solution for IT security teams (CERTs, CSIRTs, abuse departments,…) for collecting and processing security feeds (such as log files) using a message queuing protocol. It’s a community-driven initiative called IHAP (Incident Handling...
The post intelmq: collecting and processing security feeds appeared first on Penetration Testing Tools.
SuperMega – Cordyceps Implementation SuperMega is a shellcode loader by injecting it into genuine executables (.exe or .dll). The loader is programmed in C. The idea is that injecting shellcode nicely into a non-malicious...
The post SuperMega: Stealthily inject shellcode into an executable appeared first on Penetration Testing Tools.
Maester Monitor your Microsoft 365 tenant’s security configuration using Maester! Maester is an open source PowerShell-based test automation framework designed to help you monitor and maintain the security configuration of your Microsoft 365 environment. Why Maester?...
The post Maester: Monitor your Microsoft 365 tenant’s security configuration appeared first on Penetration Testing Tools.
simplewall A simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows Vista and...
The post simplewall: Simple tool to configure Windows Filtering Platform appeared first on Penetration Testing Tools.
VelLMes-AI-Honeypot The VelLMes read as (Vel-L-M-es, from Slavic deity Veles and LLMs) creates interactive, dynamic, and realistic honeypots through the use of Large Language Models (LLMs). The VelLMes tool was created from a research project to show the...
The post VelLMes-AI-Honeypot: Creates interactive, dynamic, and realistic honeypots appeared first on Penetration Testing Tools.
What the heck is a ferox anyway? Ferox is short for Ferric Oxide. Ferric Oxide, simply put, is rust. The name rustbuster was taken, so I decided on a variation. What’s it do tho?...
The post feroxbuster: fast, simple, recursive content discovery tool written in Rust appeared first on Penetration Testing Tools.
