Ghostwriter Ghostwriter is a part of your team. It helps you manage clients, projects, reports, and infrastructure in one application. It does not replace some of the more common or traditional project management tools,...
The post Ghostwriter: The SpecterOps project management and reporting engine appeared first on Penetration Testing Tools.
pmacct pmacct is a small set of multi-purpose passive network monitoring tools. It can account, classify, aggregate, replicate and export forwarding-plane data, ie. IPv4 and IPv6 traffic; collect and correlate control-plane data via BGP...
The post pmacct: passive network monitoring tools appeared first on Penetration Testing Tools.
DriverJack DriverJack is a tool designed to load a vulnerable driver by abusing lesser-known NTFS techniques. These method bypass the registration of a Driver Service on the system by hijacking an existing service, and also...
The post DriverJack: load a vulnerable driver by abusing lesser-known NTFS techniques appeared first on Penetration Testing Tools.
enum4linux-ng enum4linux-ng.py is a rewrite of Mark Lowe’s (former Portcullis Labs now Cisco CX Security Labs) enum4linux.pl, a tool for enumerating information from Windows and Samba systems, aimed at security professionals and CTF players....
The post enum4linux-ng: enumerating information from Windows and Samba systems appeared first on Penetration Testing Tools.
OWASP O-Saft OWASP SSL advanced forensic tool / OWASP SSL audit for testers O-Saft is easy to use tool to show information about SSL certificate and tests the SSL connection according to given list...
The post O-Saft: OWASP SSL advanced forensic tool appeared first on Penetration Testing Tools.
OWASP Coraza Web Application Firewall Welcome to OWASP Coraza WAF, Coraza is a golang enterprise-grade Web Application Firewall framework that supports Modsecurity’s seclang language and is 100% compatible with OWASP Core Ruleset. Coraza...
The post coraza: OWASP Coraza Web Application Firewall appeared first on Penetration Testing Tools.
SecretScanner Deepfence SecretScanner can find unprotected secrets in container images or file systems. SecretScanner is a standalone tool that retrieves and searches container and host filesystems, matching the contents against a database of approximately...
The post SecretScanner: Find secrets and passwords in container images and file systems appeared first on Penetration Testing Tools.
kdigger kdigger, short for “Kubernetes digger”, is a context discovery tool for Kubernetes penetration testing. This tool is a compilation of various plugins called buckets to facilitate pentesting Kubernetes from inside a pod. Please...
The post kdigger: context discovery tool for Kubernetes penetration testing appeared first on Penetration Testing Tools.
TrickDump TrickDump dumps the lsass process without creating a Minidump file, generating instead 3 JSON and 1 ZIP file with the memory region dumps. In three steps: Lock: Get OS information using RtlGetVersion. Shock:...
The post TrickDump: Dump lsass without generating a Minidump file appeared first on Penetration Testing Tools.
Open Source API Firewall API Firewall is a high-performance proxy with API request and response validation based on OpenAPI/Swagger schema. It is designed to protect REST API endpoints in cloud-native environments. It provides API...
The post API Firewall: Fast and light-weight API proxy firewall appeared first on Penetration Testing Tools.
Attack Flow The Attack Flow project helps defenders move from tracking adversary behaviors individually to the sequence of techniques adversaries use to achieve their goals. Understanding the context within those sequences, as well as...
The post attack flow: helps defenders move from tracking adversary behaviors appeared first on Penetration Testing Tools.
What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of network devices. It builds complete models of network behavior from device...
The post batfish: network configuration analysis tool appeared first on Penetration Testing Tools.
SCCM HTTP Looter Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s) How it works SCCM distribution points (DPs) are the servers used by Microsoft SCCM to host all the...
The post SCCM HTTP Looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares appeared first on Penetration Testing Tools.
OWASP WrongSecrets Welcome to the OWASP WrongSecrets p0wnable app. With this app, we have packed various ways of how to not store your secrets. These can help you to realize whether your secret management...
The post OWASP WrongSecrets: Secrets Management-focused vulnerable app appeared first on Penetration Testing Tools.
Nightingale Nightingale is an enterprise-level cloud-native monitoring system, which can be used as a drop-in replacement for Prometheus for alerting and management. Nightingale is a cloud-native monitoring system by All-In-On design, that supports enterprise-class...
The post nightingale: enterprise-level cloud-native monitoring system appeared first on Penetration Testing Tools.
Gitxray Gitxray (short for Git X-Ray) is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that...
The post gitxray: leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more appeared first on Penetration Testing Tools.
Stealth Guardian Performing adversary simulation exercises is a time-consuming task, especially when developing new attack mechanisms and testing those against defence systems that have been deployed to the target. With this tool, we have...
The post StealthGuardian: The Middleware Shield for Adversary Simulation appeared first on Penetration Testing Tools.
uncover uncover is a go wrapper using APIs of well-known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize...
The post uncover: Quickly discover exposed hosts on the internet appeared first on Penetration Testing Tools.
Kerbeus-BOF Beacon Object Files for Kerberos abuse. This is an implementation of some important features of the Rubeus project, written in C. The project features integration with the C2 frameworks Cobalt Strike and Havoc. Ticket requests and renewals asktgt...
The post Kerbeus-BOF: Beacon Object Files for Kerberos abuse appeared first on Penetration Testing Tools.
GitGuardian Shield: protect your secrets with GitGuardian GitGuardian shield (ggshield) is a CLI application that runs in your local environment or in a CI environment to help you detect more than 300 types of secrets,...
The post ggshield: Detect secret in source code, scan your repo for leaks appeared first on Penetration Testing Tools.
