BPF Compiler Collection (BCC) BCC is a toolkit for creating efficient kernel tracing and manipulation programs and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known...
The post BPF Compiler Collection: BPF-based Linux IO analysis, networking, monitoring, and more appeared first on Penetration Testing Tools.
SharpDPAPI SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi‘s Mimikatz project. The SharpChrome subproject is an adaptation of work from @gentilkiwi and @djhohnstein, specifically his SharpChrome project. However, this version of SharpChrome uses a different version of the C# SQL library that...
The post SharpDPAPI: C# port of some Mimikatz DPAPI functionality appeared first on Penetration Testing Tools.
Interactive PDF Analysis Interactive PDF Analysis (also called IPA) allows any researcher to explore the inner details of any PDF file. PDF files may be used to carry malicious payloads that exploit vulnerabilities and...
The post Interactive PDF Analysis: GUI analyzer for deep-diving into PDF files appeared first on Penetration Testing Tools.
SlackEnum A user enumeration tool for Slack. Setup Clone this repository and install the necessary dependencies with the commands below. Create the cookies_dir and http_requests_dir folders defined in the settings at the top of slackenum.py. By default, these are slack_ids-cookiebro and slack_ids-burp and...
The post SlackEnum: A user enumeration tool for Slack appeared first on Penetration Testing Tools.
LNAV — The Logfile Navigator The log file navigator, lnav, is an enhanced log file viewer that takes advantage of any semantic information that can be gleaned from the files being viewed, such as...
The post lnav: an enhanced log file viewer appeared first on Penetration Testing Tools.
Knows More KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync). Main features Import NTLM Hashes from .ntds output txt file (generated by CrackMapExec or...
The post knowsmore: A swiss army knife tool for pentesting Microsoft Active Directory appeared first on Penetration Testing Tools.
Malwoverview Malwoverview.py is a first response tool for threat hunting, which performs an initial and quick triage of malware samples, URLs, IP addresses, domains, malware families, IOCs and hashes. Additionally, Malwoverview is able to...
The post malwoverview: perform an initial and quick triage on a directory containing malware samples appeared first on Penetration Testing Tools.
ronin Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter IPs/hosts/URLs, querying ASNs, querying DNS, HTTP, scanning...
The post ronin: Ruby platform for vulnerability research and exploit development appeared first on Penetration Testing Tools.
USP Establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script) Feature This Go program establishes persistence on a Linux system by...
The post USP: Establishes persistence on a Linux system appeared first on Penetration Testing Tools.
Lil Pwny Lil Pwny is a Python application to perform an offline audit of NTLM hashes of users’ passwords, recovered from Active Directory, against known compromised passwords from Have I Been Pwned. The usernames...
The post Lil Pwny: auditing Active Directory passwords using Python appeared first on Penetration Testing Tools.
The lunar script generates a scored audit report of a Unix host’s security. It is based on the CIS and other frameworks. Where possible there are references to the CIS and other benchmarks in...
The post lunar: UNIX security auditing tool appeared first on Penetration Testing Tools.
About Ghost Framework Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device...
The post Ghost Framework: An Android post-exploitation framework appeared first on Penetration Testing Tools.
Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX (and Win32 under Cygwin) operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal/Wireshark. It allows you to classify traffic as...
The post tcpreplay: Pcap editing and replay tools for *NIX and Windows appeared first on Penetration Testing Tools.
Continuous Secure Delivery – Out of the Box secureCodeBox is a docker based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of...
The post secureCodeBox: automate a bunch of security testing tools out of the box appeared first on Penetration Testing Tools.
Darkus Darkus is a Onion websites searcher it uses deep/dark web searching engines to search a specific word and give you back the link results. Current Search Engines: Name Link Ahmia(Clear Web site) https://ahmia.fi...
The post Darkus: A Onion websites searcher appeared first on Penetration Testing Tools.
The Auditor app uses hardware-based security features to validate the identity of a device, along with the authenticity and integrity of the operating system. It ensures the device is running a verified operating system with a...
The post Auditor: Hardware-based attestation/intrusion detection app for Android devices appeared first on Penetration Testing Tools.
UAC (Unix-like Artifacts Collector) UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD,...
The post Unix-like Artifacts Collector: Live Response collection tool for Incident Reponse appeared first on Penetration Testing Tools.
NamedPipeMaster NamedPipeMaster is a versatile tool for analyzing and monitoring in named pipes. It includes Ring3NamedPipeConsumer for direct server interaction, Ring3NamedPipeMonitor for DLL-based API hooking and data collection, and Ring0NamedPipeFilter for comprehensive system-wide monitoring....
The post NamedPipeMaster: A tool used to analyze and monitor in named pipes appeared first on Penetration Testing Tools.
CHIPSEC CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware (BIOS/UEFI), and platform components. It includes a security test suite, tools for accessing various low-level interfaces, and forensic...
The post chipsec: Platform Security Assessment Framework appeared first on Penetration Testing Tools.
python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format, or Compound Document File Format), such as Microsoft Office documents or Outlook messages, mainly for...
The post oletools: analyze MS OLE2 files & MS Office documents, for malware analysis, forensics & debugging appeared first on Penetration Testing Tools.
