UEFI Firmware Parser The UEFI firmware parser is a simple module and set of scripts for parsing, extracting, and recreating UEFI firmware volumes. This includes parsing modules for BIOS, OptionROM, Intel ME and other...
The post UEFI Firmware Parser: Parse BIOS/Intel ME/UEFI firmware related structures appeared first on Penetration Testing Tools.
Cable Cable is a simple post-exploitation tool used for enumeration and further exploitation of Active Directory environments. This tool was primarily created to learn more about .NET offensive development in an Active Directory context,...
The post Cable: .NET post-exploitation toolkit for Active Directory reconnaissance and exploitation appeared first on Penetration Testing Tools.
BOAST The BOAST Outpost for AppSec Testing BOAST is a server built to receive and report Out-of-Band Application Security Testing reactions. Some application security tests will only cause out-of-band reactions from the tested...
The post BOAST: The BOAST Outpost for AppSec Testing appeared first on Penetration Testing Tools.
Zeek Network Security Monitor Zeek is a powerful framework for network analysis and security monitoring. It is a powerful system that on top of the functionality it provides out of the box, also offers...
The post Zeek Network Security Monitor: powerful network analysis framework appeared first on Penetration Testing Tools.
Cloud Offensive Breach and Risk Assessment (COBRA) Tool Cloud Offensive Breach and Risk Assessment (COBRA) is an open-source tool designed to empower users to simulate attacks within multi-cloud environments, offering a comprehensive evaluation of...
The post COBRA: Cloud Offensive Breach and Risk Assessment Tool appeared first on Penetration Testing Tools.
Stratosphere Linux IPS This is the Linux version of the Stratosphere IPS, a behavioral-based intrusion detection and prevention system that uses machine learning algorithms to detect malicious behaviors. It is part of a larger...
The post StratosphereLinuxIPS: Stratosphere IPS for Linux appeared first on Penetration Testing Tools.
Slither, the Solidity source analyzer Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...
The post slither: Static Analyzer for Solidity appeared first on Penetration Testing Tools.
defender2yara defender2yara is a Python tool that converts Microsoft Defender Antivirus Signatures (VDM) into YARA rules. This tool facilitates the creation of custom YARA rules from the latest signature databases or manually provided .vdm...
The post defender2yara: Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules appeared first on Penetration Testing Tools.
Cacti Cacti is a complete network graphing solution designed to harness the power of RRDTool‘s data storage and graphing functionality. Cacti provide a fast poller, advanced graph templating, multiple data acquisition methods, and user...
The post Cacti: Network traffic graphics monitoring and analysis tools appeared first on Penetration Testing Tools.
hate_crack A tool for automating cracking methodologies through Hashcat from the TrustedSec team. Installation Get the latest hashcat binaries OSX Install mkdir -p hashcat/deps git clone https://github.com/KhronosGroup/OpenCL-Headers.git hashcat/deps/OpenCL cd hashcat/ make make install Download...
The post hate_crack: automating cracking methodologies through Hashcat appeared first on Penetration Testing Tools.
Tabby Tabby has been recognized by the academic community and accepted for publication in The 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2023). Tabby is a Java Code Analysis Tool...
The post tabby: A Java Code Analysis Tool appeared first on Penetration Testing Tools.
NETworkManager Connect and manage remote systems with Remote Desktop, PowerShell, PuTTY, TigerVNC or AWS (Systems Manager) Session Manager. Analyze and troubleshoot your network and systems with features such as the WiFi Analyzer, IP Scanner,...
The post NETworkManager: managing networks/troubleshoot network problems appeared first on Penetration Testing Tools.
saferwall – Collaborative and Streamlined Threat Analysis at Scale Saferwall allows you to analyze, triage, and classify threats in just minutes. ⭐ Collaborative – Built for security teams and researchers to streamline analysis, identification, and sharing of malware samples....
The post saferwall: Collaborative and Streamlined Threat Analysis at Scale appeared first on Penetration Testing Tools.
Halberd: Multi-Cloud Security Testing Tool Halberd is a powerful, multi-cloud security testing tool. Born out of the need for a unified, easy-to-use tool, Halberd enables you to proactively assess your cloud defenses by executing...
The post Halberd: Multi-Cloud Attack Tool appeared first on Penetration Testing Tools.
What is Impacket? Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and for some protocols (e.g. SMB1-3 and MSRPC)...
The post Impacket: collection of Python classes for working with network protocols appeared first on Penetration Testing Tools.
Forbidden Bypass 4xx HTTP response status codes. Script uses multithreading, and is based on brute-forcing so might have some false positives. Script uses colored output. Results will be sorted by HTTP response status code...
The post forbidden: Bypass 4xx HTTP response status codes appeared first on Penetration Testing Tools.
Silver SAML Forger Silver SAML Forger is C# tool that helps you create custom SAML responses. It can be used to implement the Silver SAML attack. Defend against Silver SAML To safeguard effectively against...
The post Silver SAML Forger: Implement the Silver SAML attack appeared first on Penetration Testing Tools.
S3Scanner A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Custom The tool takes in a list of bucket names to check. Found S3 buckets...
The post S3Scanner: Scan for open S3 buckets and dump appeared first on Penetration Testing Tools.
Knock Knock is a Python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan for DNS zone transfer and to try to bypass the wildcard DNS...
The post Knock: enumerate subdomains on a target domain appeared first on Penetration Testing Tools.
pwnobd Offensive cybersecurity toolkit for vulnerability analysis and penetration testing of OBD-II devices. Adding new functionality Most functionality is dynamically registered onto pwnobd through the use of decorators. Attacks Located in src/pwnobd/modules/attacks/. See...
The post pwnobd: Offensive cybersecurity toolkit for vulnerability analysis and penetration testing of OBD-II devices appeared first on Penetration Testing Tools.
