Cloud Offensive Breach and Risk Assessment (COBRA) Tool Cloud Offensive Breach and Risk Assessment (COBRA) is an open-source tool designed to empower users to simulate attacks within multi-cloud environments, offering a comprehensive evaluation of...
The post COBRA: Cloud Offensive Breach and Risk Assessment Tool appeared first on Penetration Testing Tools.
Stratosphere Linux IPS This is the Linux version of the Stratosphere IPS, a behavioral-based intrusion detection and prevention system that uses machine learning algorithms to detect malicious behaviors. It is part of a larger...
The post StratosphereLinuxIPS: Stratosphere IPS for Linux appeared first on Penetration Testing Tools.
Slither, the Solidity source analyzer Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...
The post slither: Static Analyzer for Solidity appeared first on Penetration Testing Tools.
defender2yara defender2yara is a Python tool that converts Microsoft Defender Antivirus Signatures (VDM) into YARA rules. This tool facilitates the creation of custom YARA rules from the latest signature databases or manually provided .vdm...
The post defender2yara: Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules appeared first on Penetration Testing Tools.
Cacti Cacti is a complete network graphing solution designed to harness the power of RRDTool‘s data storage and graphing functionality. Cacti provide a fast poller, advanced graph templating, multiple data acquisition methods, and user...
The post Cacti: Network traffic graphics monitoring and analysis tools appeared first on Penetration Testing Tools.
hate_crack A tool for automating cracking methodologies through Hashcat from the TrustedSec team. Installation Get the latest hashcat binaries OSX Install mkdir -p hashcat/deps git clone https://github.com/KhronosGroup/OpenCL-Headers.git hashcat/deps/OpenCL cd hashcat/ make make install Download...
The post hate_crack: automating cracking methodologies through Hashcat appeared first on Penetration Testing Tools.
Tabby Tabby has been recognized by the academic community and accepted for publication in The 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2023). Tabby is a Java Code Analysis Tool...
The post tabby: A Java Code Analysis Tool appeared first on Penetration Testing Tools.
NETworkManager Connect and manage remote systems with Remote Desktop, PowerShell, PuTTY, TigerVNC or AWS (Systems Manager) Session Manager. Analyze and troubleshoot your network and systems with features such as the WiFi Analyzer, IP Scanner,...
The post NETworkManager: managing networks/troubleshoot network problems appeared first on Penetration Testing Tools.
saferwall – Collaborative and Streamlined Threat Analysis at Scale Saferwall allows you to analyze, triage, and classify threats in just minutes. ⭐ Collaborative – Built for security teams and researchers to streamline analysis, identification, and sharing of malware samples....
The post saferwall: Collaborative and Streamlined Threat Analysis at Scale appeared first on Penetration Testing Tools.
Halberd: Multi-Cloud Security Testing Tool Halberd is a powerful, multi-cloud security testing tool. Born out of the need for a unified, easy-to-use tool, Halberd enables you to proactively assess your cloud defenses by executing...
The post Halberd: Multi-Cloud Attack Tool appeared first on Penetration Testing Tools.
What is Impacket? Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and for some protocols (e.g. SMB1-3 and MSRPC)...
The post Impacket: collection of Python classes for working with network protocols appeared first on Penetration Testing Tools.
Forbidden Bypass 4xx HTTP response status codes. Script uses multithreading, and is based on brute-forcing so might have some false positives. Script uses colored output. Results will be sorted by HTTP response status code...
The post forbidden: Bypass 4xx HTTP response status codes appeared first on Penetration Testing Tools.
Silver SAML Forger Silver SAML Forger is C# tool that helps you create custom SAML responses. It can be used to implement the Silver SAML attack. Defend against Silver SAML To safeguard effectively against...
The post Silver SAML Forger: Implement the Silver SAML attack appeared first on Penetration Testing Tools.
S3Scanner A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Custom The tool takes in a list of bucket names to check. Found S3 buckets...
The post S3Scanner: Scan for open S3 buckets and dump appeared first on Penetration Testing Tools.
Knock Knock is a Python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan for DNS zone transfer and to try to bypass the wildcard DNS...
The post Knock: enumerate subdomains on a target domain appeared first on Penetration Testing Tools.
pwnobd Offensive cybersecurity toolkit for vulnerability analysis and penetration testing of OBD-II devices. Adding new functionality Most functionality is dynamically registered onto pwnobd through the use of decorators. Attacks Located in src/pwnobd/modules/attacks/. See...
The post pwnobd: Offensive cybersecurity toolkit for vulnerability analysis and penetration testing of OBD-II devices appeared first on Penetration Testing Tools.
cemu Writing assembly is fun. Assembly is the lowest language (humanly understandable) available to communicate with computers, and is crucial to understand the internal mechanisms of any machine. Unfortunately, setting up an environment to...
The post cemu: lightweight multi-architecture assembly playground appeared first on Penetration Testing Tools.
What is BinCAT? A static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA. It features: value analysis (registers and memory) taint analysis type reconstruction and propagation backward and forward analysis In action...
The post bincat: Binary code static analyser, with IDA integration appeared first on Penetration Testing Tools.
What is Traceeshark? Traceeshark brings the world of Linux runtime security monitoring and advanced system tracing to the familiar and ubiquitous network analysis tool Wireshark. Using Traceeshark, you can load Tracee captures in JSON format into...
The post Traceeshark: Linux Runtime Security Monitoring Meets Wireshark appeared first on Penetration Testing Tools.
Brakeman Brakeman is an open-source static analysis tool that checks Ruby on Rails applications for security vulnerabilities. It can detect: Possibly unescaped model attributes or parameters in views (Cross-Site Scripting) Bad string interpolation in...
The post Brakeman: A static analysis security vulnerability scanner for Ruby on Rails applications appeared first on Penetration Testing Tools.
