Open Source API Firewall API Firewall is a high-performance proxy with API request and response validation based on OpenAPI/Swagger schema. It is designed to protect REST API endpoints in cloud-native environments. It provides API...
The post API Firewall: Fast and light-weight API proxy firewall appeared first on Penetration Testing Tools.
Attack Flow The Attack Flow project helps defenders move from tracking adversary behaviors individually to the sequence of techniques adversaries use to achieve their goals. Understanding the context within those sequences, as well as...
The post attack flow: helps defenders move from tracking adversary behaviors appeared first on Penetration Testing Tools.
What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of network devices. It builds complete models of network behavior from device...
The post batfish: network configuration analysis tool appeared first on Penetration Testing Tools.
SCCM HTTP Looter Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s) How it works SCCM distribution points (DPs) are the servers used by Microsoft SCCM to host all the...
The post SCCM HTTP Looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares appeared first on Penetration Testing Tools.
OWASP WrongSecrets Welcome to the OWASP WrongSecrets p0wnable app. With this app, we have packed various ways of how to not store your secrets. These can help you to realize whether your secret management...
The post OWASP WrongSecrets: Secrets Management-focused vulnerable app appeared first on Penetration Testing Tools.
Nightingale Nightingale is an enterprise-level cloud-native monitoring system, which can be used as a drop-in replacement for Prometheus for alerting and management. Nightingale is a cloud-native monitoring system by All-In-On design, that supports enterprise-class...
The post nightingale: enterprise-level cloud-native monitoring system appeared first on Penetration Testing Tools.
Gitxray Gitxray (short for Git X-Ray) is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that...
The post gitxray: leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more appeared first on Penetration Testing Tools.
Stealth Guardian Performing adversary simulation exercises is a time-consuming task, especially when developing new attack mechanisms and testing those against defence systems that have been deployed to the target. With this tool, we have...
The post StealthGuardian: The Middleware Shield for Adversary Simulation appeared first on Penetration Testing Tools.
uncover uncover is a go wrapper using APIs of well-known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize...
The post uncover: Quickly discover exposed hosts on the internet appeared first on Penetration Testing Tools.
Kerbeus-BOF Beacon Object Files for Kerberos abuse. This is an implementation of some important features of the Rubeus project, written in C. The project features integration with the C2 frameworks Cobalt Strike and Havoc. Ticket requests and renewals asktgt...
The post Kerbeus-BOF: Beacon Object Files for Kerberos abuse appeared first on Penetration Testing Tools.
GitGuardian Shield: protect your secrets with GitGuardian GitGuardian shield (ggshield) is a CLI application that runs in your local environment or in a CI environment to help you detect more than 300 types of secrets,...
The post ggshield: Detect secret in source code, scan your repo for leaks appeared first on Penetration Testing Tools.
Catalyst Catalyst is an incident response platform or SOAR (Security Orchestration, Automation, and Response) system. It can help you to automate your alert handling and incident response procedures. Features Ticket (Alert & Incident) Management...
The post catalyst: automate alert handling and incident response processes appeared first on Penetration Testing Tools.
What is WHAD? The cybersecurity community has published a lot of wireless hacking tools based on various hardware platforms and custom communication protocols specifically designed to work with associated software. This leads to hackers...
The post WHAD: Wireless HAcking Devices appeared first on Penetration Testing Tools.
betterscan-ce It is a Code and Infrastructure (IaC) and Cloud-native Scanning/SAST/Static Analysis/Linting solution using many tools/Scanners with One Report. You can also add any tool to it. Currently, it supports many languages and tech...
The post betterscan: code analysis & automation platform appeared first on Penetration Testing Tools.
logdata-anomaly-miner This tool parses log data and allows to definition of analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and the lowest possible permissions to make it...
The post logdata-anomaly-miner: parses log data and allows to define analysis pipelines for anomaly detection appeared first on Penetration Testing Tools.
Power Pwn An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform. Modules: Copilot Connector and Automator Allow interaction with Copilot for Microsoft 365 through the WebSocket messages...
The post Power Pwn: An offensive security toolset for Microsoft 365 appeared first on Penetration Testing Tools.
waymore The idea behind waymore is to find even more links from the Wayback Machine than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on...
The post waymore: find even more links from the Wayback Machine appeared first on Penetration Testing Tools.
Hubble Hubble is a fully distributed networking and security observability platform for cloud-native workloads. It is built on top of Cilium and eBPF to enable deep visibility into the communication and behavior of services as well as...
The post Hubble: Network, Service & Security Observability for Kubernetes appeared first on Penetration Testing Tools.
Bearer Bearer is a static application security testing (SAST) tool that scans your source code and analyzes your data flows to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). We...
The post Bearer: finds risks and vulnerabilities in your code appeared first on Penetration Testing Tools.
PyCript The Pycript extension for Burp Suite is a valuable tool for penetration testing and security professionals. It enables easy encryption and decryption of requests during testing, which can help evade detection and bypass...
The post PyCript: Burp Suite extension that allows for bypassing client-side encryption appeared first on Penetration Testing Tools.
