Locksmith A tool built to find and fix common misconfigurations in Active Directory Certificate Services. Installation Module Install module from the PowerShell Gallery (preferred): Open a PowerShell prompt and run Install-Module -Name...
The post Locksmith: find and fix common misconfigurations in Active Directory Certificate Services appeared first on Penetration Testing Tools.
ActivityWatch The goal of ActivityWatch is simple: Enable the collection of as many valuable lifedata as possible without compromising user privacy. What ActivityWatch is A set of watchers that record relevant information about what you...
The post activitywatch: Log what you do on your computer appeared first on Penetration Testing Tools.
The Firmware Analysis and Comparison Tool (FACT) Firmware analysis is a tough challenge with a lot of tasks. Many of these tasks can be automated (either with new approaches or incorporation of existing tools)...
The post FACT_core: Firmware Analysis and Comparison Tool appeared first on Penetration Testing Tools.
Slhasher – Bulk VirusTotal Hash Lookups Slhasher is a collaborative tool designed to perform bulk SHA256 hash lookups through a graphical user interface. It integrates with VirusTotal to fetch hash metadata and supports exporting...
The post Slhasher: Bulk VirusTotal Hash Lookups appeared first on Penetration Testing Tools.
gosec – Golang Security Checker Inspects source code for security problems by scanning the Go AST. Usage Gosec can be configured to only run a subset of rules, exclude certain file paths, and...
The post gosec: Golang Security Checker appeared first on Penetration Testing Tools.
FireEye Labs Obfuscated String Solver The FLARE Obfuscated String Solver (FLOSS, formerly FireEye Labs Obfuscated String Solver) uses advanced static analysis techniques to automatically extract and deobfuscate all strings from malware binaries. You can...
The post flare-floss: Automatically extract obfuscated strings from malware appeared first on Penetration Testing Tools.
GBounty GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identify potential vulnerabilities in web applications. It takes a target URL, list of URL, raw...
The post GBounty: Multi-step website vulnerability scanner appeared first on Penetration Testing Tools.
VulnerableCode VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current. It is made by the FOSS community to improve and secure...
The post VulnerableCode: free and open vulnerabilities database and the packages they impact appeared first on Penetration Testing Tools.
Mobile Security Framework Mobile Security Framework (MobSF) is an intelligent, all-in-one open-source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static and dynamic analysis. It can be used for effective and fast security...
The post Mobile Security Framework (MobSF): Automated mobile application pen-testing framework appeared first on Penetration Testing Tools.
Extract VMK of BitLocker volume with TPMAndPIN protector and knowing PIN Technic to extract VMK from the bitlocker volume that TPM protects are already documented in different publications. This GitHub repo gives a toolset...
The post Extract VMK of BitLocker volume with TPMAndPIN protector and knowing PIN appeared first on Penetration Testing Tools.
EAPHammer EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, the focus is...
The post eaphammer: evil twin attacks against WPA2-Enterprise networks appeared first on Penetration Testing Tools.
Slack Watchman Slack Watchman is an application that uses the Slack API to look for potentially sensitive data exposed in your Slack workspaces. Features It searches for, and reports back on: Externally shared...
The post slack watchman: Monitoring you Slack workspaces for sensitive information appeared first on Penetration Testing Tools.
SharpExclusionFinder This C# program finds Windows Defender folder exclusions using Windows Defender through its command-line tool (MpCmdRun.exe). The program processes directories recursively, with configurable depth and thread usage, and outputs information about exclusions and scan progress....
The post SharpExclusionFinder: finds Windows Defender folder exclusions appeared first on Penetration Testing Tools.
Starkiller Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. Multi-user GUI application for interfacing with the Empire C2 server from any computer. Starkiller represents a huge step forward...
The post Starkiller: Frontend for PowerShell Empire appeared first on Penetration Testing Tools.
Venator – Threat Detection Platform A flexible detection system that simplifies rule management and deployment with K8s CronJob and Helm. Venator is optimized for Kubernetes deployment but is flexible enough to run standalone or...
The post venator: A flexible threat detection platform appeared first on Penetration Testing Tools.
What is DalFox DalFox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed...
The post dalfox: Parameter Analysis and XSS Scanning tool appeared first on Penetration Testing Tools.
IllusiveFog IllusiveFog is an implant kit for Microsoft Windows-based networks for long-term stealthy access and recon. IllusiveFog is designed for highly covert & stealthy operations, because of this reason features are kept limited and...
The post IllusiveFog: Windows Administrator level Implant appeared first on Penetration Testing Tools.
interactsh Interactsh is an Open-Source Solution for Out of band Data Extraction, A tool designed to detect bugs that cause external interactions, For example – Blind SQLi, Blind CMDi, SSRF, etc. Features DNS/HTTP/SMTP Interaction...
The post interactsh: Open-Source Solution for Out of band Data Extraction appeared first on Penetration Testing Tools.
scared scared is a library that aims to provide tools to achieve side-channel analysis. It provides pretty high-level APIs, and ready-to-use tools to quickly run classic CPA, DPA, … leakage, and reverse analysis. It...
The post scared: side-channel analysis framework appeared first on Penetration Testing Tools.
FaceDancer FaceDancer is an exploitation tool aimed at creating hijackable, proxy-based DLLs. FaceDancer performs two main functions: Recon: Scans a given DLL to create the export definition file for proxying. Attack: Creates a malicious...
The post FaceDancer: An exploitation tool aimed at creating hijackable, proxy-based DLLs appeared first on Penetration Testing Tools.
