Android BugBazaar: Your mobile appsec playground to Explore, Exploit, Excel BugBazaar is a comprehensive mobile application intentionally designed to be vulnerable, featuring over 30 vulnerabilities. Developed to emulate real-world scenarios, it includes more than...
The post BugBazaar: Mobile penetration testing on the Android platform appeared first on Penetration Testing Tools.
GDB dashboard Modular visual interface for GDB in Python. This comes as a standalone single-file .gdbinit which, among the other things, enables a configurable dashboard showing the most relevant information during the program execution. Its main...
The post gdb dashboard: Modular visual interface for GDB in Python appeared first on Penetration Testing Tools.
sechub It enables the operation and integration of various security tools with one central API in a development environment. SecHub server orchestrates different security tools by one API layer. Users call SecHub Server but...
The post sechub: one central and easy way to use different security tools with one API/Client appeared first on Penetration Testing Tools.
msInvader msInvader is an adversary simulation tool built for blue teams, designed to simulate adversary techniques within M365 and Azure environments. Its purpose is to generate attack telemetry that aids teams in building, testing,...
The post msInvader: M365/Azure adversary simulation tool appeared first on Penetration Testing Tools.
GTIRB The GrammaTech Intermediate Representation for Binaries (GTIRB) is a machine code analysis and rewriting data structure. It is intended to facilitate the communication of binary IR between programs performing binary disassembly, analysis, transformation,...
The post gtirb: Intermediate Representation for Binary analysis and transformation appeared first on Penetration Testing Tools.
IntelMQ is a solution for IT security teams (CERTs, CSIRTs, abuse departments,…) for collecting and processing security feeds (such as log files) using a message queuing protocol. It’s a community-driven initiative called IHAP (Incident Handling...
The post intelmq: collecting and processing security feeds appeared first on Penetration Testing Tools.
SuperMega – Cordyceps Implementation SuperMega is a shellcode loader by injecting it into genuine executables (.exe or .dll). The loader is programmed in C. The idea is that injecting shellcode nicely into a non-malicious...
The post SuperMega: Stealthily inject shellcode into an executable appeared first on Penetration Testing Tools.
Maester Monitor your Microsoft 365 tenant’s security configuration using Maester! Maester is an open source PowerShell-based test automation framework designed to help you monitor and maintain the security configuration of your Microsoft 365 environment. Why Maester?...
The post Maester: Monitor your Microsoft 365 tenant’s security configuration appeared first on Penetration Testing Tools.
simplewall A simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows Vista and...
The post simplewall: Simple tool to configure Windows Filtering Platform appeared first on Penetration Testing Tools.
VelLMes-AI-Honeypot The VelLMes read as (Vel-L-M-es, from Slavic deity Veles and LLMs) creates interactive, dynamic, and realistic honeypots through the use of Large Language Models (LLMs). The VelLMes tool was created from a research project to show the...
The post VelLMes-AI-Honeypot: Creates interactive, dynamic, and realistic honeypots appeared first on Penetration Testing Tools.
What the heck is a ferox anyway? Ferox is short for Ferric Oxide. Ferric Oxide, simply put, is rust. The name rustbuster was taken, so I decided on a variation. What’s it do tho?...
The post feroxbuster: fast, simple, recursive content discovery tool written in Rust appeared first on Penetration Testing Tools.
Intel Owl Do you want to get threat intelligence data about a file, an IP, or a domain? Do you want to get this kind of data from multiple sources at the same time using a...
The post Intel Owl: analyze files, domains, IPs in multiple ways appeared first on Penetration Testing Tools.
SCAGoat SCAGoat is an application for Software Composition Analysis (SCA) that focuses on vulnerable and compromised JAR dependencies used in development code, providing users with hands-on learning opportunities to understand potential attack scenarios. It...
The post SCAGoat : Damn Vulnerable SCA Application appeared first on Penetration Testing Tools.
MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. The msticpy package was initially developed to support Jupyter Notebooks authoring for Azure Sentinel. Many of the included tools can be used in other security scenarios for...
The post msticpy: Microsoft Threat Intelligence Security Tools appeared first on Penetration Testing Tools.
Kubernetes Goat The Kubernetes Goat designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security. 🏁 Scenarios Sensitive keys in codebases DIND (docker-in-docker) exploitation SSRF in the Kubernetes (K8S) world Container...
The post kubernetes goat: “Vulnerable by Design” Kubernetes Cluster appeared first on Penetration Testing Tools.
MORF – Mobile Reconnaissance Framework Mobile Reconnaissance Framework is a powerful, lightweight and platform-independent offensive mobile security tool designed to help hackers and developers identify and address sensitive information within mobile applications. It is...
The post MORF – Mobile Reconnaissance Framework appeared first on Penetration Testing Tools.
Runtime Mobile Security Runtime Mobile Security (RMS), powered by FRIDA, is a powerful web interface that helps you to manipulate Android Java Classes and Methods at Runtime. You can easily dump all the loaded classes...
The post Runtime Mobile Security: manipulate Android Java Classes and Methods at Runtime appeared first on Penetration Testing Tools.
Terrascan Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud-native infrastructure. Features 500+ Policies for security best practices Scanning of Terraform 12+ (HCL2) Scanning of Kubernetes YAML/JSON Support...
The post terrascan: Detect compliance and security violations across Infrastructure as Code appeared first on Penetration Testing Tools.
Ulfberht Shellcode loader Features : Indirect syscall. Module stomping. Load a stomped module using APC. Execute the payload with a direct jump (jmp) without creating a new thread. API hashing implemented using the DJB2...
The post Ulfberht: Shellcode loader appeared first on Penetration Testing Tools.
TrailShark The TrailShark Capture Utility seamlessly integrates with Wireshark, facilitating the capture of AWS CloudTrail logs directly into Wireshark for near-real-time analysis. This tool can be used for debugging AWS API calls and played...
The post TrailShark: Enhance AWS Security with Near-Real-Time Insights appeared first on Penetration Testing Tools.
