Network Flight Recorder NFR is a lightweight application which processes network traffic using the AlphaSOC Analytics Engine. NFR can monitor log files on disk (e.g. Microsoft DNS debug logs, Bro IDS logs) or run as a network...
The post Network Flight Recorder: score network traffic and flag anomalies appeared first on Penetration Testing Tools.
Crawl4AI Crawl4AI simplifies asynchronous web crawling and data extraction, making it accessible for large language models (LLMs) and AI applications. Feature 🆓 Completely free and open-source 🚀 Blazing fast performance, outperforming many paid services...
The post crawl4ai: Open-source LLM Friendly Web Crawler & Scrapper appeared first on Penetration Testing Tools.
themis Themis is an open-source high-level cryptographic services library for mobile and server platforms, which provides secure data exchange and storage. Themis provides four important cryptographic services: Secure Message: a simple encrypted messaging...
The post themis: open-source high-level cryptographic services library appeared first on Penetration Testing Tools.
capa capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the...
The post capa: identify capabilities in executable files appeared first on Penetration Testing Tools.
WhoYouCalling Monitors network activity made by a process through the use of Windows Event Tracing (ETW) and Full Packet Capture (FPC). Filters a generated .pcap file with BPF based on the detected network activity made by...
The post WhoYouCalling: Effortless Process Network Monitoring with ETW and BPF appeared first on Penetration Testing Tools.
sslscan sslscan tests SSL/TLS-enabled services to discover supported cipher suites. This is a fork of ioerror’s version of sslscan. Changes are as follows: Highlight SSLv2 and SSLv3 ciphers in output. Highlight CBC ciphers on SSLv3 (POODLE). Highlight...
The post sslscan: tests SSL/TLS enabled services to discover supported cipher suites appeared first on Penetration Testing Tools.
Bopscrk Bopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists. Included in BlackArch Linux pentesting distribution and Rawsec’s Cybersecurity Inventory since August 2019. The first idea was inspired by Cupp and Crunch. We could say...
The post bopscrk: generate smart and powerful wordlists appeared first on Penetration Testing Tools.
AuditForge AuditForge (PwnDoc fork) is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to search...
The post auditforge: A pentest reporting application appeared first on Penetration Testing Tools.
What is Acra Acra helps you easily secure your databases in distributed, microservice-rich environments. It allows you to selectively encrypt sensitive records with strong multi-layer cryptography, detect potential intrusions and SQL injections and cryptographically compartmentalize...
The post Acra: database protection suite appeared first on Penetration Testing Tools.
Dr. Memory: the memory debugger Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory (including outside of allocated heap units...
The post drmemory: Memory Debugger for Windows, Linux, Mac, and Android appeared first on Penetration Testing Tools.
EDR-Antivirus-Bypass-to-Gain-Shell-Access This repository contains a proof-of-concept (PoC) for bypassing EDR and antivirus solutions using a memory injection technique. The code executes shellcode that spawns a reverse shell, successfully evading detection by various security mechanisms. This project...
The post EDR & Antivirus Bypass to Gain Shell Access appeared first on Penetration Testing Tools.
LuLu is the free open-source macOS firewall that aims to block unauthorized (outgoing) network traffic unless explicitly approved by the user: Full details and usage instructions can be found here. Feature 100% free As...
The post LuLu: free open-source macOS firewall appeared first on Penetration Testing Tools.
Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames against specified domains. It’s really meant as a pre-cursor to...
The post fierce: A DNS reconnaissance tool appeared first on Penetration Testing Tools.
kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions.
The post kube-score: performs static code analysis of your Kubernetes object definitions appeared first on Penetration Testing Tools.
EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust – and works on all platforms supported by rust (that have stdlib). 🚀 Multi-threaded. ✨ Supports XML and JSON outputs,...
The post evtx: A Fast parser for the Windows XML Event Log (EVTX) format appeared first on Penetration Testing Tools.
pwntools – CTF toolkit Pwntools is a CTF framework and exploits the development library. Written in Python, it is designed for rapid prototyping and development and intended to make exploit writing as simple as...
The post pwntools: CTF framework and exploit development library appeared first on Penetration Testing Tools.
DogeRat A multifunctional Telegram-based Android RAT without port forwarding Feature 🔴 Real time 🌐 custom web view 🔔 notification reader 🔔 notification sender (send custom notification that apper on target device with custom click...
The post DogeRat: A multifunctional Telegram based Android RAT without port forwarding appeared first on Penetration Testing Tools.
Tsunami Tsunami is a general-purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. Why Tsunami? When security vulnerabilities or misconfigurations are actively exploited by attackers, organizations...
The post tsunami-security-scanner: general purpose network security scanner appeared first on Penetration Testing Tools.
pwndbg pwndbg (/poʊndbæg/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. Pwndbg has a lot of...
The post pwndbg: Exploit Development and Reverse Engineering with GDB appeared first on Penetration Testing Tools.
MSSprinkler MSSprinkler is a password-spraying utility for organizations to test their M365 accounts from an external perspective. It employs a ‘low-and-slow’ approach to avoid locking out accounts and provides verbose information related to accounts...
The post MSSprinkler: A Non-Disruptive Password Spraying Tool for M365 appeared first on Penetration Testing Tools.
