PsMapExec A PowerShell tool heavily inspired by the popular tool CrackMapExec / NetExec. PsMapExec aims to bring the function and feel of these tools to PowerShell with its own arsenal of improvements. PsMapExec is...
The post PsMapExec: assess and compromise an Active Directory environment appeared first on Penetration Testing Tools.
ADSpider Tool for monitoring Active Directory changes in real-time without getting all objects. Instead, it uses replication metadata and Update Sequence Number (USN) to filter the current properties of objects. How to use git...
The post ADSpider: monitor Active Directory changes in real time appeared first on Penetration Testing Tools.
WinObjEx64 WinObjEx64 is an advanced utility that lets you explore the Windows Object Manager namespace. For certain object types, you can double-click on it or use the “Properties…” toolbar button to get more information,...
The post WinObjEx64: Windows Object Explorer 64-bit appeared first on Penetration Testing Tools.
Flow Analyzer Flow Analyzer is designed for helping in low-level understanding and testing of OAuth 2.0 Grants/Flows. OpenID Connect (OIDC) OAuth 2.0 was designed for authorization. OpenID Connect (OIDC) extends the OAuth 2.0 functionality...
The post Flow Analyzer: help in testing and analyzing OAuth 2.0 Flows appeared first on Penetration Testing Tools.
PHPStan – PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves...
The post PHPStan: PHP Static Analysis Tool appeared first on Penetration Testing Tools.
What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it’s easy to customize with plugins...
The post CTFd: Capture The Flag framework appeared first on Penetration Testing Tools.
dnSpy dnSpy is a tool to reverse engineer .NET assemblies. It includes a decompiler, a debugger, and an assembly editor (and more) and can be easily extended by writing your extension. It uses dnlib to...
The post dnSpy: .NET assembly editor, decompiler, and debugger appeared first on Penetration Testing Tools.
Janusec Application Gateway Janusec Application Gateway is an application security solution that provides WAF (Web Application Firewall), CC attack defense, a unified web administration portal, private key protection, web routing, and scalable load balancing....
The post janusec: Golang based application security solutions appeared first on Penetration Testing Tools.
CyberChef The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of “cyber” operations within a web browser. These operations include simple encoding like XOR or Base64,...
The post CyberChef: web app for encryption, encoding, compression and data analysis appeared first on Penetration Testing Tools.
Aleph Aleph is a tool for indexing large amounts of both documents (PDF, Word, HTML) and structured (CSV, XLS, SQL) data for easy browsing and search. It is built with investigative reporting as a primary...
The post aleph: find the people and companies you look for appeared first on Penetration Testing Tools.
What is CommandoVM? Complete Mandiant Offensive VM (“CommandoVM”) is a comprehensive, customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with various offensive tools not included in Kali Linux, highlighting the...
The post Commando VM: fully customizable Windows-based pentesting virtual machine distribution appeared first on Penetration Testing Tools.
Odinova Digital Tiger: Overview Odinova Digital Tiger is an advanced application designed for Open-Source Intelligence (OSINT), equipped with versatile tools and a user-friendly interface to streamline investigative workflows and enhance data analysis capabilities. Documenter:...
The post Odinova: An advanced application designed for Open-Source Intelligence appeared first on Penetration Testing Tools.
CrowdSec The CrowdSec Security Engine is an open-source, lightweight software that detects and blocks malicious actors from accessing your systems at various levels, using log analysis and threat patterns called scenarios. CrowdSec is a modular framework,...
The post CrowdSec: Real-time & crowdsourced protection against aggressive IPs appeared first on Penetration Testing Tools.
Ominis-OSINT: Web Hunter It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query...
The post Ominis-OSINT Web Hunter: Open Source Intelligence Tool appeared first on Penetration Testing Tools.
What is ciscoconfparse? Short answer: ciscoconfparse is a Python library that helps you quickly answer questions like these about your configurations: What interfaces are shutdown? Which interfaces are in trunk mode? What address and subnet mask...
The post ciscoconfparse: Parse, Audit, Query, Build, and Modify Cisco IOS-style configurations appeared first on Penetration Testing Tools.
DefectDojo DefectDojo is a DevSecOps platform. DefectDojo streamlines DevSecOps by serving as an aggregator and single pane of glass for your security tools. DefectDojo has smart features to enhance and tune the results from...
The post django-DefectDojo: application vulnerability correlation & security orchestration application appeared first on Penetration Testing Tools.
SQLRecon Description A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. Mandatory Arguments The mandatory arguments consist of an authentication type (either Windows, Local or Azure), connection parameters and a module. -a – Authentication...
The post SQLRecon: C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation appeared first on Penetration Testing Tools.
Dependency-Track Modern applications leverage the availability of existing components for use as building blocks in application development. By using existing components, organizations can dramatically decrease time-to-market. Reusing existing components, however, comes at a cost....
The post dependency-track: intelligent Software Composition Analysis platform appeared first on Penetration Testing Tools.
FinalRecon FinalRecon is a fast and simple Python script for web reconnaissance. It follows a modular structure so in the future new modules can be added with ease. Features Header Information Whois SSL Certificate...
The post FinalRecon: OSINT Tool for All-In-One Web Reconnaissance appeared first on Penetration Testing Tools.
