FalconHound FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with an SIEM...
The post FalconHound: blue team multi-tool appeared first on Penetration Testing Tools.
emp3r0r Linux/Windows post-exploitation framework made by Linux user features beautiful terminal UI, use tmux for window management multi-tasking, you don’t need to wait for any commands to finish basic API provided through Unix socket...
The post emp3r0r: Linux/Windows post exploitation framework appeared first on Penetration Testing Tools.
pwnlook Pwnlook is an offensive post exploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails configured in it. What it does: List mailboxes List folders...
The post pwnlook: an offensive post exploitation tool appeared first on Penetration Testing Tools.
Pandora This is a red team tool that assists in gathering credentials from different password managers. They are separated into three categories, Windows 10 desktop applications, browsers, and browser plugins. This may work on...
The post pandora: A red team tool to extract credentials from password managers appeared first on Penetration Testing Tools.
Wapiti works as a “black-box” vulnerability scanner, that means it won’t study the source code of web applications but will work like a fuzzer, scanning the pages of the deployed web application, extracting links...
The post Wapiti: web-application vulnerability scanner appeared first on Penetration Testing Tools.
RustiveDump RustiveDump is a Rust-based tool designed to dump the memory of the lsass.exe process using only NT system calls. It creates a minimal minidump file from scratch, containing essential components like SystemInfo, ModuleList, and Memory64List, with support for XOR encryption and remote transmission....
The post RustiveDump: dump the memory of the lsass.exe process appeared first on Penetration Testing Tools.
KnowsMore KnowsMore is a Swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS, and DCSync). Main features Import NTLM Hashes from .ntds output txt file (generated by CrackMapExec or secretsdump.py)...
The post KnowsMore: swiss army knife tool for pentesting Microsoft Active Directory appeared first on Penetration Testing Tools.
kernel hardening checker There are plenty of Linux kernel hardening config options. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems...
The post kernel hardening checker: checking the hardening options in the Linux kernel config appeared first on Penetration Testing Tools.
dnstwist See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand...
The post dnstwist: Domain name permutation engine appeared first on Penetration Testing Tools.
Cameradar Cameradar allows you to Detect open RTSP hosts on any accessible target host Detect which device model is streaming Launch automated dictionary attacks to get their stream route (e.g.: /live.sdp) Launch automated dictionary attacks to...
The post Cameradar: Hacking RTSP CCTV Cameras appeared first on Penetration Testing Tools.
Gatekeeper What is Gatekeeper? Gatekeeper is the first open-source DoS protection system. It is designed to scale to any peak bandwidth, so it can withstand DoS attacks both today and tomorrow. In spite of...
The post gatekeeper: open source DoS protection system appeared first on Penetration Testing Tools.
Overview This is a tool used to exploit CRED-1 over a SOCKS5 connection (with UDP support). How CRED-1 Attack Works CRED-1 can be broken down into the following steps: Send a DHCP Request for...
The post cred1py: A tool used to exploit CRED-1 over a SOCKS5 connection appeared first on Penetration Testing Tools.
Velociraptor – Endpoint visibility and collection tool. Velociraptor is a unique, advanced open-source endpoint monitoring, digital forensic, and cyber response platform. It was originally developed by DFIR professionals who needed a powerful and efficient...
The post velociraptor: Endpoint visibility and collection tool appeared first on Penetration Testing Tools.
IVRE IVRE is an open-source framework for network recon. It relies on open-source well-known tools (Nmap, Zmap, Masscan, Bro, and p0f) to gather data (network intelligence), stores it in a database (MongoDB), and provides tools to analyze it....
The post ivre: open source network recon framework appeared first on Penetration Testing Tools.
Locksmith A tool built to find and fix common misconfigurations in Active Directory Certificate Services. Installation Module Install module from the PowerShell Gallery (preferred): Open a PowerShell prompt and run Install-Module -Name...
The post Locksmith: find and fix common misconfigurations in Active Directory Certificate Services appeared first on Penetration Testing Tools.
ActivityWatch The goal of ActivityWatch is simple: Enable the collection of as many valuable lifedata as possible without compromising user privacy. What ActivityWatch is A set of watchers that record relevant information about what you...
The post activitywatch: Log what you do on your computer appeared first on Penetration Testing Tools.
The Firmware Analysis and Comparison Tool (FACT) Firmware analysis is a tough challenge with a lot of tasks. Many of these tasks can be automated (either with new approaches or incorporation of existing tools)...
The post FACT_core: Firmware Analysis and Comparison Tool appeared first on Penetration Testing Tools.
Slhasher – Bulk VirusTotal Hash Lookups Slhasher is a collaborative tool designed to perform bulk SHA256 hash lookups through a graphical user interface. It integrates with VirusTotal to fetch hash metadata and supports exporting...
The post Slhasher: Bulk VirusTotal Hash Lookups appeared first on Penetration Testing Tools.
gosec – Golang Security Checker Inspects source code for security problems by scanning the Go AST. Usage Gosec can be configured to only run a subset of rules, exclude certain file paths, and...
The post gosec: Golang Security Checker appeared first on Penetration Testing Tools.
FireEye Labs Obfuscated String Solver The FLARE Obfuscated String Solver (FLOSS, formerly FireEye Labs Obfuscated String Solver) uses advanced static analysis techniques to automatically extract and deobfuscate all strings from malware binaries. You can...
The post flare-floss: Automatically extract obfuscated strings from malware appeared first on Penetration Testing Tools.
