Gitxray Gitxray (short for Git X-Ray) is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that...
The post gitxray: leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more appeared first on Penetration Testing Tools.
Stealth Guardian Performing adversary simulation exercises is a time-consuming task, especially when developing new attack mechanisms and testing those against defence systems that have been deployed to the target. With this tool, we have...
The post StealthGuardian: The Middleware Shield for Adversary Simulation appeared first on Penetration Testing Tools.
uncover uncover is a go wrapper using APIs of well-known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize...
The post uncover: Quickly discover exposed hosts on the internet appeared first on Penetration Testing Tools.
Kerbeus-BOF Beacon Object Files for Kerberos abuse. This is an implementation of some important features of the Rubeus project, written in C. The project features integration with the C2 frameworks Cobalt Strike and Havoc. Ticket requests and renewals asktgt...
The post Kerbeus-BOF: Beacon Object Files for Kerberos abuse appeared first on Penetration Testing Tools.
GitGuardian Shield: protect your secrets with GitGuardian GitGuardian shield (ggshield) is a CLI application that runs in your local environment or in a CI environment to help you detect more than 300 types of secrets,...
The post ggshield: Detect secret in source code, scan your repo for leaks appeared first on Penetration Testing Tools.
Catalyst Catalyst is an incident response platform or SOAR (Security Orchestration, Automation, and Response) system. It can help you to automate your alert handling and incident response procedures. Features Ticket (Alert & Incident) Management...
The post catalyst: automate alert handling and incident response processes appeared first on Penetration Testing Tools.
What is WHAD? The cybersecurity community has published a lot of wireless hacking tools based on various hardware platforms and custom communication protocols specifically designed to work with associated software. This leads to hackers...
The post WHAD: Wireless HAcking Devices appeared first on Penetration Testing Tools.
betterscan-ce It is a Code and Infrastructure (IaC) and Cloud-native Scanning/SAST/Static Analysis/Linting solution using many tools/Scanners with One Report. You can also add any tool to it. Currently, it supports many languages and tech...
The post betterscan: code analysis & automation platform appeared first on Penetration Testing Tools.
logdata-anomaly-miner This tool parses log data and allows to definition of analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and the lowest possible permissions to make it...
The post logdata-anomaly-miner: parses log data and allows to define analysis pipelines for anomaly detection appeared first on Penetration Testing Tools.
Power Pwn An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform. Modules: Copilot Connector and Automator Allow interaction with Copilot for Microsoft 365 through the WebSocket messages...
The post Power Pwn: An offensive security toolset for Microsoft 365 appeared first on Penetration Testing Tools.
waymore The idea behind waymore is to find even more links from the Wayback Machine than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on...
The post waymore: find even more links from the Wayback Machine appeared first on Penetration Testing Tools.
Hubble Hubble is a fully distributed networking and security observability platform for cloud-native workloads. It is built on top of Cilium and eBPF to enable deep visibility into the communication and behavior of services as well as...
The post Hubble: Network, Service & Security Observability for Kubernetes appeared first on Penetration Testing Tools.
Bearer Bearer is a static application security testing (SAST) tool that scans your source code and analyzes your data flows to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). We...
The post Bearer: finds risks and vulnerabilities in your code appeared first on Penetration Testing Tools.
PyCript The Pycript extension for Burp Suite is a valuable tool for penetration testing and security professionals. It enables easy encryption and decryption of requests during testing, which can help evade detection and bypass...
The post PyCript: Burp Suite extension that allows for bypassing client-side encryption appeared first on Penetration Testing Tools.
Mageni Mageni is an open source vulnerability management platform. Mageni provides a faster, enjoyable, and leaner vulnerability management experience for modern cybersecurity programs. Real-life problems that Mageni solves for you Assets Discovery Services Discovery...
The post mageni: open source vulnerability management platform appeared first on Penetration Testing Tools.
Nosey Parker: Find secrets in textual data Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data. It is useful both for offensive and defensive security testing. Key features:...
The post noseyparker: finds secrets and sensitive information in textual data and Git history appeared first on Penetration Testing Tools.
Caido Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Feature Sitemap The Sitemap feature allows you to visualize the structure of any website that is proxied through...
The post Caido: audit web applications with efficiency and ease appeared first on Penetration Testing Tools.
Reverse SSH Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH syntax Dynamic, local and remote forwarding Native SCP and SFTP implementations for retrieving files from your targets...
The post Reverse SSH: SSH based reverse shell appeared first on Penetration Testing Tools.
Grimoire Grimoire is a “REPL for detection engineering” that allows you to generate datasets of cloud audit logs for common attack techniques. It currently supports AWS. How it works First, Grimoire detonates an attack....
The post grimoire: Generate datasets of cloud audit logs for common attacks appeared first on Penetration Testing Tools.
Artemis A modular web reconnaissance tool and vulnerability scanner based on Karton. Features Artemis includes: subdomain scan using crt.sh, Shodan integration, brute-forcing of interesting paths (e.g. .env), brute-forcing of easy WordPress/MySQL/PostgreSQL/FTP passwords, email...
The post Artemis: modular web reconnaissance tool and vulnerability scanner appeared first on Penetration Testing Tools.
