Git-Rotate Leveraging GitHub Actions for IP Rotation – for more information see the following blog post. The Sprayer and Catcher components are currently configured to target the Microsoft login portal and handle the response data. You’ll need to modify...
The post Git-Rotate: Bypassing IP Blocks with GitHub Actions appeared first on Penetration Testing Tools.
legba Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming fewer resources than similar...
The post legba: multiprotocol credentials bruteforcer / password sprayer and enumerator appeared first on Penetration Testing Tools.
MemProcFS Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to assist with the analysis workflow. Features: Auto-Install of MemProcFS, EvtxECmd, Elasticsearch, Kibana Auto-Update of MemProcFS, EvtxECmd (incl. Maps),...
The post MemProcFS Analyzer: Automated Forensic Analysis of Windows Memory Dumps appeared first on Penetration Testing Tools.
bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That’s all it does: no more and no less. # On your local machine...
The post bore: modern, simple TCP tunnel in Rust appeared first on Penetration Testing Tools.
Native Bypass CredGuard NativeBypassCredGuard is a tool designed to bypass Credential Guard by patching WDigest.dll using only NTAPI functions (exported by ntdll.dll). It is available in two flavours: C# and C++. The tool locates...
The post NativeBypassCredGuard: Bypass Credential Guard appeared first on Penetration Testing Tools.
MetaHub MetaHub is an open-source security tool for context-based security vulnerability management. It can automate the process of contextualizing and prioritizing security findings based on your environment and your needs, YOUR context. It focuses on...
The post metahub: open-source security tool for context-based security vulnerability management appeared first on Penetration Testing Tools.
Phantun A lightweight and fast UDP to TCP obfuscator. Phantun is a project that obfuscated UDP packets into TCP connections. It aims to achieve maximum performance with minimum processing and encapsulation overhead. It is...
The post phantun: lightweight and fast UDP to TCP obfuscator appeared first on Penetration Testing Tools.
Vanir: Missing Patch Scanner Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system. By default, Vanir pulls up-to-date CVEs from Open Source Vulnerabilities...
The post Vanir: Scalable and Accurate CVE Detection in Source Code appeared first on Penetration Testing Tools.
APTRS APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also...
The post APTRS: Automated Penetration Testing Reporting System appeared first on Penetration Testing Tools.
Masker Logger Have you ever been coding late at night, desperately trying to fix a bug before a deadline? In that mad scramble, did you accidentally log some sensitive data like a password or...
The post Masker Logger: Secure Your Logs, Protect Your Data appeared first on Penetration Testing Tools.
Donut Donut is a shellcode generation tool that creates x86 or x64 shellcode payloads from .NET Assemblies. This shellcode may be used to inject the Assembly into arbitrary Windows processes. Given an arbitrary .NET...
The post Donut: Generates x86 and x64 position-independent shellcode appeared first on Penetration Testing Tools.
wtfis Passive host and domain name lookup tool for non-robots WTF is it? wtfis is a commandline tool that gathers information about a domain or FQDN using various OSINT services. Unlike other tools of its...
The post wtfis: Passive host and domain name lookup tool for non-robots appeared first on Penetration Testing Tools.
SuperdEye SuperdEye is the implementation of HellHall (a revised version of TartarusGate) in pure Go and Go Assembler. The purpose is to scan hooked NTDLL and retrieve the Syscall number to then do an...
The post SuperdEye: Go-ing Beyond AV/EDR with Indirect Syscalls appeared first on Penetration Testing Tools.
Chisel-Strike A .NET XOR encrypted cobalt strike aggressor implementation for the chisel to utilize faster proxy and advanced socks5 capabilities. Why write this? In my experience, I found socks4/socks4a proxies quite slow in comparison...
The post Chisel-Strike: .NET XOR encrypted cobalt strike aggressor implementation appeared first on Penetration Testing Tools.
apkLeaks Scanning APK file for URIs, endpoints & secrets. Installation Linux $ sudo apt-get install libssl-dev swig -y OSX $ brew install openssl swig Windows You need to install: OpenSSL, and swig-win. To install apkLeaks,...
The post apkleaks: Scanning APK file for URIs, endpoints & secrets appeared first on Penetration Testing Tools.
RequestShield RequestShield is a 100% Free and Open Source tool designed to analyze HTTP access.logs and identify suspicious HTTP requests and potential security threats. It uses factors like geolocation, abuse history, request volume, and...
The post RequestShield: analyze HTTP access.logs and identify suspicious HTTP requests and potential security threats appeared first on Penetration Testing Tools.
autobloody autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound combining pathgen.py and autobloody.py. This tool automates the AD privesc between two AD objects, the source (the one we own) and...
The post autobloody: automatically exploit Active Directory privilege escalation paths appeared first on Penetration Testing Tools.
Attack Surface Analyzer Attack Surface Analyzer (ASA) is a Microsoft-developed open source security tool that analyzes the attack surface of a target system and reports on potential security vulnerabilities introduced during the installation of...
The post Attack Surface Analyzer: analyze your operating system’s security configuration appeared first on Penetration Testing Tools.
bloodyAD BloodyAD is an Active Directory Privilege Escalation Framework. This tool can perform specific LDAP/SAMR calls to a domain controller in order to perform AD privesc. It supports authentication using cleartext passwords, pass-the-hash, pass-the-ticket,...
The post bloodyAD: Active Directory Privilege Escalation Framework appeared first on Penetration Testing Tools.
Muraena Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities. The tool re-implements the 15-years old idea of using a custom reverse proxy to dynamically interact with the origin to be...
The post muraena: almost-transparent reverse proxy aimed at automating phishing and post-phishing activities appeared first on Penetration Testing Tools.
