Spyre Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is the easy operationalization of YARA rules and other indicators of...
The post spyre: simple YARA-based IOC scanner appeared first on Penetration Testing Tools.
FaceGSM FaceGSM designed for performing targeted adversarial attacks using the FGSM (Fast Gradient Sign Method) in Facial Recognition Embedding Model. FaceGSM revolutionizes security testing with a suite of innovative features, including: Static – Takes static images as input for FaceGSM. Capture – Takes image captured by...
The post FaceGSM: Targeted Adversarial Attack using FGSM Method appeared first on Penetration Testing Tools.
THE YARALYZER Visually inspect all of the regex matches (and their sexier, more cloak-and-dagger cousins, the YARA matches) found in binary data and/or text. See what happens when you force various character encodings upon those...
The post THE YARALYZER: Visually inspect YARA and regex matches found in both binary and text data appeared first on Penetration Testing Tools.
SMERSH Smersh is a pentest-oriented collaborative tool used to track the progress of your company’s missions and generate rapport. Architecture SMERSH uses many docker containers in its architecture, which means you have to...
The post Smersh: pentest-oriented collaborative tool appeared first on Penetration Testing Tools.
GPOHunter – Active Directory Group Policy Security Analyzer GPOHunter is a comprehensive tool designed to analyze and identify security misconfigurations in Active Directory Group Policy Objects (GPOs). It automates security checks and provides detailed...
The post GPOHunter: Active Directory Group Policy Security Analyzer appeared first on Penetration Testing Tools.
CVE Prioritizer Tool CVE_Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, and CISA’s Known Exploited Vulnerabilities. It provides valuable insights into the likelihood of exploitation and the potential impact of...
The post CVE_Prioritizer: Streamline vulnerability patching with CVSS, EPSS, and CISA’s Known Exploited Vulnerabilities appeared first on Penetration Testing Tools.
bettercap bettercap is a powerful, easily extensible, and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they...
The post bettercap: Swiss army knife for network attacks and monitoring appeared first on Penetration Testing Tools.
KexecDDPlus This proof-of-concept is the result of a research project that aimed at extending the work of @floesen_ on the KsecDD Windows driver. It relies on Server Silos to access the KsecDD driver directly, without having...
The post KexecDDPlus: Exploiting the KsecDD Windows driver appeared first on Penetration Testing Tools.
Cloudlist Cloudlist is a multi-cloud tool for getting Assets (Hostnames, IP Addresses) from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...
The post cloudlist: listing Assets from multiple Cloud Providers appeared first on Penetration Testing Tools.
Power Pwn Power Pwn is an offensive and defensive security toolset for Microsoft Power Platform. Disclaimer: These materials are presented from an attacker’s perspective to raise awareness of the risks of underestimating the security...
The post Power Pwn: An offensive and defensive security toolset for Microsoft 365 Power Platform appeared first on Penetration Testing Tools.
Linux Process Injection This repository contains proof-of-concept implementations of various Linux process injection primitives. This code is meant to provide simple examples of injection techniques in action, allowing defenders to understand how they work...
The post Linux Process Injection: proof-of-concept implementations of various Linux process injection primitives appeared first on Penetration Testing Tools.
Fibratus Fibratus is a tool for exploration and tracing of the Windows kernel. It lets you trap system-wide events such as process life-cycle, file system I/O, registry modifications or network requests among many other observability signals. In a...
The post fibratus: exploration and tracing of the Windows kernel appeared first on Penetration Testing Tools.
Spoofy Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, “Why do we need another tool that can check if...
The post Spoofy: checks if a list of domains can be spoofed based on SPF and DMARC records appeared first on Penetration Testing Tools.
Ldapper A GoLang tool to enumerate and abuse LDAP. Made simple. Ldapper was created with for use in offensive security engagements for user enumeration, group enumeration, and more. Ldapper uses familiar “net” commands such as...
The post ldapper: A GoLang tool to enumerate and abuse LDAP appeared first on Penetration Testing Tools.
apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding, and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources...
The post apk.sh: makes reverse engineering Android apps easier appeared first on Penetration Testing Tools.
NimPlant – A light first-stage C2 implant written in Nim and Python Feature Overview Lightweight and configurable implant wrote in the Nim programming language Pretty web GUI that will make you look cool...
The post NimPlant: light-weight first-stage C2 implant written in Nim appeared first on Penetration Testing Tools.
URLFinder URLFinder is a high-speed, passive URL discovery tool designed to simplify and accelerate web asset discovery, ideal for penetration testers, security researchers, and developers looking to gather URLs without active scanning. Feature Curated...
The post URLFinder: No More Active Scanning for URL Gathering appeared first on Penetration Testing Tools.
fingerprintx fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port scanners like Naabu to fingerprint a set of ports identified...
The post fingerprintx: rapidly fingerprint the service running on all the discovered ports appeared first on Penetration Testing Tools.
Grepmarx – source code static analysis platform for security auditors Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. Features...
The post grepmarx: source code static analysis platform for security auditors appeared first on Penetration Testing Tools.
Nuke It From Orbit With the precision of a brain surgeon wielding a chainsaw, nifo can obliterate most AV/EDR products from endpoints or servers running the world’s most popular operating system, even if they’re...
The post NIFO: remove AV/EDR with physical access appeared first on Penetration Testing Tools.
