EDR Telemetry Blocker Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination IP addresses are parsed based on the server name in the TLS Client Hello...
The post EDR Telemetry Blocker via Person-in-the-Middle Network Filtering Attacks appeared first on Penetration Testing Tools.
kube-bench kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Tests are configured with YAML files, making this tool easy to update...
The post kube-bench: Checks Kubernetes security best practices as defined in the CIS Kubernetes Benchmark appeared first on Penetration Testing Tools.
SUDO_KILLER SUDO_KILLER is a tool that can be used for privilege escalation on the Linux environment by abusing SUDO in several ways. The tool helps to identify misconfiguration within sudo rules, vulnerability within the...
The post SUDO_KILLER: identify and exploit sudo rules’ misconfigurations and vulnerabilities within sudo appeared first on Penetration Testing Tools.
Mobile Verification Toolkit Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices. It...
The post Mobile Verification Toolkit: forensic tool to look for signs of infection in smartphone devices appeared first on Penetration Testing Tools.
ESP32 Marauder The ESP32 Marauder is a suite of WiFi/Bluetooth offensive and defensive tools created for the ESP32 and was originally inspired by Spacehuhn’s esp8266_deauther project. The tool itself serves as a portable device used to test...
The post ESP32 Marauder: suite of WiFi/Bluetooth offensive and defensive tools for the ESP32 appeared first on Penetration Testing Tools.
PatrOwl PatrOwl is a scalable, free and open-source solution for orchestrating Security Operations. PatrowlEngines is the engine framework and the supported list of engines performing the operations (scans, searches, API calls, …) in due time. The...
The post PatrowlEngines: Open Source, Free and Scalable Security Operations Orchestration Platform appeared first on Penetration Testing Tools.
vuls For a system administrator, having to perform security vulnerability analysis and software updates on a daily basis can be a burden. To avoid downtime in a production environment, it is common for a...
The post vuls: Vulnerability scanner for Linux/FreeBSD appeared first on Penetration Testing Tools.
Faraday – Open Source Vulnerability Manager Faraday introduces a new concept – IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distribution, indexation, and analysis of the data generated during a security...
The post Faraday: Open Source Vulnerability Manager appeared first on Penetration Testing Tools.
Dependency Check Dependency Check is a Software Composition Analysis (SCA) tool that attempts to detect publicly disclosed vulnerabilities contained within a project’s dependencies. It does this by determining if there is a Common Platform...
The post Dependency Check: detects publicly disclosed vulnerabilities in application dependencies appeared first on Penetration Testing Tools.
Falco Falco is a cloud-native security tool. It provides near real-time threat detection for cloud, container, and Kubernetes workloads by leveraging runtime insights. Falco can monitor events defined via customizable rules from various sources, including the...
The post Falco: A cloud-native security tool appeared first on Penetration Testing Tools.
Cppcheck Cppcheck is a static analysis tool for C/C++ code. It provides a unique code analysis to detect bugs and focuses on detecting undefined behavior and dangerous coding constructs. The goal is to detect only real errors...
The post Cppcheck: A static analysis tool for C/C++ code appeared first on Penetration Testing Tools.
MISP – Malware Information Sharing Platform and Threat Sharing MISP, Malware Information Sharing Platform, and Threat Sharing is an open-source software solution for collecting, storing, distributing, and sharing cybersecurity indicators and threats about cybersecurity...
The post MISP: Malware Information Sharing Platform & Threat Sharing appeared first on Penetration Testing Tools.
OperatorsKit This repository contains a collection of Beacon Object Files (BOFs) that integrate with Cobalt Strike. Kit content The following tools are currently in the OperatorsKit: Name Description AddExclusion Add a new exclusion to...
The post OperatorsKit: Collection of Beacon Object Files (BOF) for Cobalt Strike appeared first on Penetration Testing Tools.
TelecordC2 Telecord is an advanced cross-platform c2 using discord and Telegram API, it allows multi-agent handling with ease using Telegram and discord APIs can be good for exfiltration and network evasion, this project is...
The post TelecordC2: An advanced cross-platform C2 using Discord and Telegram api appeared first on Penetration Testing Tools.
Subdominator – Unleash the Power of Subdomain Enumeration Subdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential...
The post Subdominator: Unleash the Power of Subdomain Enumeration appeared first on Penetration Testing Tools.
VAmPI VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency...
The post VAmPI: Vulnerable REST API with OWASP top 10 vulnerabilities for security testing appeared first on Penetration Testing Tools.
Gapcast Gapcast is an IEEE 802.11 packet injection and analyzer software. The purpose of gapcast is to accurately detect each router’s clients, analyze, capture, inject packets & perform attacks (like Evil-Twin). Gapcast adds more...
The post gapcast: an IEEE 802.11 packet injection and analyzer software appeared first on Penetration Testing Tools.
i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of I2P client. I2P (Invisible Internet Protocol) is a universal anonymous network layer. All communications over I2P are anonymous and end-to-end encrypted, participants don’t reveal...
The post i2pd: End-to-End encrypted and anonymous Internet appeared first on Penetration Testing Tools.
RemoteKrbRelay Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework Details Now, you have four folders in front of you: Checker – old version of the checker for detecting vulnerable DCOM objects; Checkerv2.0 – new version...
The post RemoteKrbRelay: Advanced Kerberos Relay Framework appeared first on Penetration Testing Tools.
PsMapExec A PowerShell tool heavily inspired by the popular tool CrackMapExec / NetExec. PsMapExec aims to bring the function and feel of these tools to PowerShell with its own arsenal of improvements. PsMapExec is...
The post PsMapExec: assess and compromise an Active Directory environment appeared first on Penetration Testing Tools.
