LEMON is a Linux and Android memory dump tool that utilizes eBPF to capture the entire physical memory of a system and save it in LiME format, compatible with forensic tools such as Volatility...
The post lemon: eBPF Memory Dump Tool appeared first on Penetration Testing Tools.
kanha Kanha is a tool that can help you perform, a variety of attacks based on the target domain. With just kanha, you can do, Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and many more. The project...
The post kanha: A web-app pentesting suite written in Rust appeared first on Penetration Testing Tools.
With the rise of AI infrastructures, the rise of attacks on such vulnerable infrastructure is inevitable. Insecure AI infrastructure can expose organizations to significant risks, including data breaches and manipulation of AI-driven decisions. Often,...
The post AIGoat: A deliberately Vulnerable AI Infrastructure appeared first on Penetration Testing Tools.
dummy Generator of static files for testing file upload functionality. When generating a png, as in the following screenshot, you can generate a png of a specified size. Motivation I often test the file...
The post dummy: Generator of static files for testing file upload appeared first on Penetration Testing Tools.
Adaptix is an extensible post-exploitation and adversarial emulation framework made for penetration testers. The Adaptix server is written in Golang and to allow operator flexibility. The GUI Client is written in C++ QT, allowing...
The post AdaptixC2: post-exploitation and adversarial emulation framework appeared first on Penetration Testing Tools.
Aftermath Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an...
The post aftermath: Swift-based, open-source macOS incident response framework appeared first on Penetration Testing Tools.
xpid It’s nmap but for pids. xpid gives a user the ability to “investigate” for process details on a Linux system. For example, a sleeping thread will have a directory /proc/[pid] that can be navigated to,...
The post xpid: Linux Process Discovery appeared first on Penetration Testing Tools.
MLOps Attack Toolkit – MLOKit is a toolkit that can be used to attack MLOps platforms by taking advantage of the available REST API. This tool allows the user to specify an attack module,...
The post MLOKit: MLOps Attack Toolkit appeared first on Penetration Testing Tools.
Spyndicapped Spy of your users with Microsoft UIA! MS UIA (Microsoft User Interface Automation) is a special framework designed to automate the use of the Windows GUI. With its help you can read any text...
The post Spyndicapped: COM ViewLogger — new malware keylogging technique appeared first on Penetration Testing Tools.
RPCMon A GUI tool for scanning RPC communication through Event Tracing for Windows (ETW). The tool was published as part of research on RPC communication between the host and a Windows container. Overview RPCMon...
The post RPCMon: RPC Monitor tool based on Event Tracing for Windows appeared first on Penetration Testing Tools.
Locksmith A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services. Mode 0 (Default) – Identify Issues and Output to Console PS> .\Invoke-Locksmith.ps1 Running Invoke-Locksmith.ps1 with no parameters or -Mode 0 will...
The post Locksmith: identify & remediate common misconfigurations in AD Certificate Services appeared first on Penetration Testing Tools.
Linux Evidence Acquisition Framework (LEAF) Linux Evidence Acquisition Framework (LEAF) acquires artifacts and evidence from Linux EXT4 systems, accepting user input to customize the functionality of the tool for easier scalability. Offering several modules...
The post LEAF: Linux Evidence Acquisition Framework appeared first on Penetration Testing Tools.
Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens from WARC (Web ARChive) files. Troll-A is an easy-to-use, comprehensive, and fast solution for finding secrets in web archives. Features...
The post troll-a: extracting secrets such as passwords, API keys, and tokens from Web ARChive files appeared first on Penetration Testing Tools.
Zircolite is a standalone tool written in Python 3 that allows you to use SIGMA rules on: MS Windows EVTX (EVTX, XML, and JSONL formats) Auditd logs Sysmon for Linux EVTXtract CSV and XML logs...
The post Zircolite: fast SIGMA-based detection tool for EVTX or JSON Logs appeared first on Penetration Testing Tools.
WELA (Windows Event Log Analyzer) Yamato Security’s WELA(Windows Event Log Analyzer) aims to be the Swiss Army knife for Windows event logs. Currently, WELA’s greatest functionality is creating an easy-to-analyze logon timeline in order...
The post WELA: Windows Event Log Analyzer appeared first on Penetration Testing Tools.
KoviD is a Loadable Kernel Module (LKM) designed for Linux Kernel version 5 and later. Key features include: Self-hiding from SysFS. Provides reverse shell backdoors. Conceals processes from the proc file system. Handles child...
The post KoviD: Red-Team Linux kernel rootkit appeared first on Penetration Testing Tools.
Disconnected RSAT Disconnected RSAT is a launcher for the official Group Policy Manager, Certificate Authority and Certificate Templates snap-in to bypass the domain joined requirement that is needed when using the official MMC snap-in....
The post DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement appeared first on Penetration Testing Tools.
Scirius Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. Scirius CE is developed by Stamus Networks and is available under the GNU GPLv3...
The post scirius: web application for Suricata ruleset management and threat hunting appeared first on Penetration Testing Tools.
domainim Domainim is a Blazing fast domain reconnaissance tool for bounty hunters written in Nim. Features Virtual hostname enumeration Reverse DNS lookup Subdomains as input Verbose output TCP port scanning with full user control...
The post domainim: A fast and comprehensive tool for organizational network scanning appeared first on Penetration Testing Tools.
PeCoReT PeCoReT (Pentest Collaboration and Reporting Tool) is an open-source application to manage your pentest projects. PeCoReT allows pentesters to focus on testing instead of writing the report. It can be customized and once...
The post pecoret: A Pentest Collaboration and Reporting Tool appeared first on Penetration Testing Tools.
