VulFi The VulFi (Vulnerability Finder) tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all...
The post VulFi: IDA Pro plugin to assist during bug hunting in binaries appeared first on Penetration Testing Tools.
HEDnsExtractor A suite for hunting suspicious targets, exposing domains, and phishing discovery Features Implementing workflows with yaml 🔥 Adds support to work with multiple domains as target 🔥 Regex support VirusTotal Integration Adds support...
The post HEDnsExtractor: A suite for hunting suspicious targets, expose domains and phishing discovery appeared first on Penetration Testing Tools.
SmuggleFuzz SmuggleFuzz is designed to assist in identifying HTTP downgrade attack vectors. Its standout feature is not just the time-based detection or request handling, but the detailed response information it provides. This empowers users...
The post SmuggleFuzz: HTTP/2 based downgrade and smuggle scanner appeared first on Penetration Testing Tools.
PoolParty A collection of fully-undetectable process injection techniques abusing Windows Thread Pools. Presented at Black Hat EU 2023 Briefings under the title – The Pool Party You Will Never Forget: New Process Injection Techniques Using...
The post PoolParty: A set of fully-undetectable process injection techniques appeared first on Penetration Testing Tools.
Logsensor A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features login panel Scanning for multiple hosts Proxy compatibility (http, https) Login panel scanning is done in multiprocessing Installation git...
The post Logsensor: discover login panels, and POST Form SQLi Scanning appeared first on Penetration Testing Tools.
EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Background Thousands of organizations utilize Slack to help their employees communicate, collaborate, and interact. Many of these Slack workspaces...
The post EvilSlackbot: A Slack bot phishing framework for Red Teaming exercises appeared first on Penetration Testing Tools.
OpenGFW OpenGFW is a flexible, easy-to-use, open-source implementation of GFW on Linux that’s in many ways more powerful than the real thing. It’s cyber sovereignty you can have on a home router. Features Full IP/TCP...
The post OpenGFW: flexible, open-source implementation of Great Firewall on Linux appeared first on Penetration Testing Tools.
LDAPWordlistHarvester A tool to generate a wordlist from the information present in LDAP, in order to crack non-random passwords of domain accounts. Features The bigger the domain is, the better the wordlist will be....
The post LDAPWordlistHarvester: generate a wordlist from the information present in LDAP appeared first on Penetration Testing Tools.
OpenArk OpenArk is an open-source anti-rootkit (ARK) tool for Windows. Ark is an Anti-Rootkit abbreviated, it aims at reversing/programming helper, and also users can find hidden malwares in the OS. More and more powerful...
The post OpenArk: Next Generation of Anti-Rootkit(ARK) tool for Windows appeared first on Penetration Testing Tools.
Bugsy Bugsy is a command-line interface (CLI) tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is...
The post bugsy: CLI tool that provides automatic security vulnerability remediation for your code appeared first on Penetration Testing Tools.
JADXecute JADXecute is a plugin for JADX that enhances its functionality by adding Dynamic Code Execution abilities. With JADXecute, you can dynamically run Java code to modify or print components of the jadx-gui output. JADXecute is inspired by IDAPython to help and aims to...
The post JADXecute: JADX-gui scripting plugin for dynamic decompiler manipulation appeared first on Penetration Testing Tools.
CHOMTE.SH CHOMTE.SH is a versatile framework designed for automating reconnaissance tasks in penetration testing. It’s useful for bug bounty hunters and penetration testers in both internal and external network engagements. Its key features include...
The post chomtesh: automate reconnaissance tasks during penetration testing appeared first on Penetration Testing Tools.
PPLBlade Protected Process Dumper Tool that supports obfuscating memory dump and transferring it on remote workstations without dropping it onto the disk. Key functionalities: Bypassing PPL protection Obfuscating memory dump files to evade Defender...
The post PPLBlade: Protected Process Dumper Tool appeared first on Penetration Testing Tools.
eHIDS A Linux Host-based Intrusion Detection System based on eBPF. Implementations & Functionalities： TCP network data capture UDP network data capture DNS information capture in uprobe mode Process data capture Uprobe way to achieve...
The post eHIDS: Linux Host-based Intrusion Detection System based on eBPF appeared first on Penetration Testing Tools.
Pentest Mapper Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension...
The post Pentest Mapper: Burp Suite Extension for Application Penetration Testing appeared first on Penetration Testing Tools.
nysm: A stealth post-exploitation container With the rise in popularity of offensive tools based on eBPF, going from credential stealers to rootkits hiding their own PID, a question came to our mind: Would it...
The post nysm: A stealth post-exploitation container appeared first on Penetration Testing Tools.
EDRSandblast-GodFault Integrates GodFault into EDR Sandblast, achieving the same result without the use of any vulnerable drivers. EDRSandBlast is a tool written in C that weaponizes a vulnerable signed driver to bypass EDR detections (Notify Routine callbacks, Object...
The post EDRSandblast-GodFault: weaponize a vulnerable signed driver to bypass EDR detections appeared first on Penetration Testing Tools.
Flutter Spy Flutter Spy is a Bash-based command-line tool designed to provide insightful code analysis and data extraction capabilities from built Flutter apps with reverse engineering. It empowers developers, bug hunters, and security enthusiasts...
The post flutter-spy: Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps appeared first on Penetration Testing Tools.
HTMLSmuggler HTMLSmuggler – JS payload generator for IDS bypass and payload delivery via HTML smuggling. The primary objective of HTML smuggling is to bypass network security controls, such as firewalls and intrusion detection systems,...
The post HTMLSmuggler: JS payload generator for IDS bypass and payload delivery via HTML smuggling appeared first on Penetration Testing Tools.
OSINT Toolkit OSINT Toolkit is a full-stack web application designed to assist security analysts in their work. It combines various functions and services into a single tool, making it easier for analysts to identify...
The post OSINT Toolkit: full stack web application built for security analysts appeared first on Penetration Testing Tools.
