Attack Surface Analyzer Attack Surface Analyzer (ASA) is a Microsoft-developed open source security tool that analyzes the attack surface of a target system and reports on potential security vulnerabilities introduced during the installation of...
The post Attack Surface Analyzer: analyze your operating system’s security configuration appeared first on Penetration Testing Tools.
bloodyAD BloodyAD is an Active Directory Privilege Escalation Framework. This tool can perform specific LDAP/SAMR calls to a domain controller in order to perform AD privesc. It supports authentication using cleartext passwords, pass-the-hash, pass-the-ticket,...
The post bloodyAD: Active Directory Privilege Escalation Framework appeared first on Penetration Testing Tools.
Muraena Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities. The tool re-implements the 15-years old idea of using a custom reverse proxy to dynamically interact with the origin to be...
The post muraena: almost-transparent reverse proxy aimed at automating phishing and post-phishing activities appeared first on Penetration Testing Tools.
Makes A software supply chain framework powered by Nix. Ever needed to run applications locally to try out your code? Execute CI/CD pipelines locally to make sure jobs are being passed. Keep execution environments frozen...
The post makes: DevSecOps framework appeared first on Penetration Testing Tools.
Hooka Hooka is able to generate shellcode loaders with multiple capabilities. It is also based on other tools like BokuLoader, Freeze or Shhhloader, and it tries to implement more evasion features. Why in Golang? Why not? Feature This...
The post Hooka: Shellcode loader generator with multiples features appeared first on Penetration Testing Tools.
WEF – WiFi Exploitation Framework This project started over 2021 as a personal tool to easily audit networks without writing long commands or setting all values one by one, in order to automate the...
The post WEF: WiFi Exploitation Framework appeared first on Penetration Testing Tools.
WhacAMole WhacAMole is a program that analyzes processes in memory in an integral way, detecting and alerting of anomalies related to the malware and presenting and saving in files all the relevant information for...
The post WhacAMole: Live memory analysis tool appeared first on Penetration Testing Tools.
Exposor Exposor is a contactless reconnaissance tool focused on technology detection across Censys, Fofa, Shodan, and Zoomeye. With a unified syntax for multi-platform querying, It gives security researchers and professionals a clear view of exposed systems, enabling quick...
The post Exposor: A Contactless Reconnaissance Tool appeared first on Penetration Testing Tools.
tetragon Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to respond in real-time to security-significant events, such as Process execution events Changes to privileges...
The post tetragon: eBPF-based Security Observability and Runtime Enforcement appeared first on Penetration Testing Tools.
Apache Tomcat Scanner A python script to scan for Apache Tomcat server vulnerabilities. Features Multithreaded workers to search for Apache tomcat servers. Multiple target sources accepted: Retrieving list of computers from a Windows domain...
The post Apache Tomcat Scanner: scan for Apache Tomcat server vulnerabilities appeared first on Penetration Testing Tools.
agneyastra – A firebase Misconfiguration Detection Toolkit Firebase, a versatile platform by Google, powers countless web and mobile applications with its extensive suite of services including real-time databases, authentication, cloud storage, and hosting. Its...
The post agneyastra: A firebase Misconfiguration Detection Toolkit appeared first on Penetration Testing Tools.
Elkeid Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture. Elkeid Agent Linux userspace agent， responsible for managing various plugins, and communication with...
The post Elkeid: Cloud-Native Host-Based Intrusion Detection solution appeared first on Penetration Testing Tools.
kubeeye KubeEye is an audit tool for Kubernetes to discover Kubernetes resources (by OPA ), cluster components, cluster nodes (by Node-Problem-Detector), and other configurations that are meeting with best practices and giving suggestions for modification. KubeEye supports...
The post kubeeye: audit tool for Kubernetes appeared first on Penetration Testing Tools.
ShadowHound ShadowHound is a set of PowerShell scripts for Active Directory enumeration without the need for introducing known-malicious binaries like SharpHound. It leverages native PowerShell capabilities to minimize detection risks and offers two methods...
The post ShadowHound: Stealthy AD Enumeration with PowerShell appeared first on Penetration Testing Tools.
The Exegol project Exegol is a community-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Script kiddies use Kali Linux, real pentesters use Exegol, megachads...
The post Exegol: Fully featured and community-driven hacking environment appeared first on Penetration Testing Tools.
Group3r Like its ancestors, Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Policy and to identify exploitable misconfigurations in the same. It does this by...
The post Group3r: Find vulnerabilities in AD Group Policy appeared first on Penetration Testing Tools.
Eclipse Eclipse is a PoC that performs Activation Context hijack to load and run an arbitrary DLL in any desired process. Initially, this technique was created as a more flexible alternative to DLL Sideloading + DLL...
The post Eclipse: Hijacking Activation Context for Arbitrary DLL Injection appeared first on Penetration Testing Tools.
hcltm Threat Modeling with HCL Overview There are many different ways in which a threat model can be documented. From a simple text file to more in-depth word documents, to fully instrumented threat models...
The post hcltm: Threat Modeling with HCL appeared first on Penetration Testing Tools.
Cloak Cloak is a pluggable transport that works alongside traditional proxy tools like OpenVPN to evade deep-packet-inspection-based censorship. Cloak is not a standalone proxy program. Rather, it works by masquerading proxy tool’s traffic as normal...
The post Cloak: evade deep-packet-inspection based censorship appeared first on Penetration Testing Tools.
NachoVPN NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server. It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by...
The post NachoVPN: Popping SSL-VPNs with a Rogue Server appeared first on Penetration Testing Tools.
