NamedPipeMaster NamedPipeMaster is a versatile tool for analyzing and monitoring in named pipes. It includes Ring3NamedPipeConsumer for direct server interaction, Ring3NamedPipeMonitor for DLL-based API hooking and data collection, and Ring0NamedPipeFilter for comprehensive system-wide monitoring....
The post NamedPipeMaster: A tool used to analyze and monitor in named pipes appeared first on Penetration Testing Tools.
CHIPSEC CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware (BIOS/UEFI), and platform components. It includes a security test suite, tools for accessing various low-level interfaces, and forensic...
The post chipsec: Platform Security Assessment Framework appeared first on Penetration Testing Tools.
python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format, or Compound Document File Format), such as Microsoft Office documents or Outlook messages, mainly for...
The post oletools: analyze MS OLE2 files & MS Office documents, for malware analysis, forensics & debugging appeared first on Penetration Testing Tools.
IRIS – Incident Response Investigation System IRIS is a web collaborative platform for incident response analysts allowing them to share investigations at a technical level. It’s a web application, so it can be either...
The post iris-web: Incident Response collaborative platform appeared first on Penetration Testing Tools.
OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, fingerprinting,...
The post OXO: A security scanning framework built for modularity, scalability and simplicity appeared first on Penetration Testing Tools.
nullinux nullinux is an internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB null sessions. Unlike many of the enumeration tools...
The post nullinux: SMB null session identification and enumeration tool appeared first on Penetration Testing Tools.
SEMA – ToolChain using Symbolic Execution for Malware Analysis SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based...
The post SEMA: ToolChain using Symbolic Execution for Malware Analysis appeared first on Penetration Testing Tools.
DNS Diagnostics and Performance Measurement Tools Ever been wondering if your ISP is hijacking your DNS traffic? Ever observed any misbehavior with your DNS responses? Ever been redirected to wrong address and suspected something is...
The post dnsdiag: DNS Diagnostics and Performance Measurement Tools appeared first on Penetration Testing Tools.
osctrl osctrl is a fast and efficient osquery management solution, implementing its remote API as a TLS endpoint. With osctrl, you can monitor all your systems running osquery, distribute its configuration fast, collect all the status and result logs,...
The post osctrl: Fast and efficient osquery management appeared first on Penetration Testing Tools.
NetAlertX – Network scanner & notification framework Get visibility of what’s going on on your WIFI/LAN network. Schedule scans for devices, port changes and get alerts if unknown devices or changes are found. Write...
The post NetAlertX: WIFI/LAN intruder detector appeared first on Penetration Testing Tools.
BotKube BotKube integration with Slack, Mattermost, or Microsoft Teams helps you monitor your Kubernetes cluster, debug critical deployments, and gives recommendations for standard practices by running checks on the Kubernetes resources. You can also ask BotKube to execute...
The post botkube: monitor your Kubernetes cluster, debug critical deployments appeared first on Penetration Testing Tools.
chainsaw – Rapidly Search and Hunt through Windows Event Logs Chainsaw provides a powerful “first-response” capability to quickly identify threats within Windows event logs. It offers a generic and fast method of searching through...
The post chainsaw: Rapidly Search and Hunt through Windows Event Logs appeared first on Penetration Testing Tools.
Tempest Tempest is a command and control framework written in 100% Rust. TEMPEST COMPONENTS: anvil – server 2 servers with APIs. All APIs are authenticated and unauth-discovery resistent. sqlite local database internal functions (building imps,...
The post Tempest: A command and control framework written in Rust appeared first on Penetration Testing Tools.
The Bastion Bastions are a cluster of machines used as the unique entry point by operational teams (such as sysadmins, developers, database admins, …) to securely connect to devices (servers, virtual machines, cloud instances,...
The post the-bastion: securely connect to devices appeared first on Penetration Testing Tools.
GShark The project is based on golang with AdminLTE to build a management system to manage the Github search results. Github API has been utilized to scrawl the related results according to keywords and...
The post gshark: Scan for sensitive information in Github easily and effectively appeared first on Penetration Testing Tools.
Tracee – Container, and system tracing using eBPF Tracee is a lightweight and easy-to-use container and system tracing tool. It allows you to observe system calls and other system events in real-time. A unique...
The post tracee: Container and system event tracing using eBPF appeared first on Penetration Testing Tools.
Blinks Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the integration of webhooks, this tool sends real-time updates whenever a new issue...
The post Blinks: Streamline Security Testing, Automate Burp Suite Pro Scans appeared first on Penetration Testing Tools.
Safety Safety is a command-line tool. Use it to check your local virtual environment, your requirement files, or any input from stdin for dependencies with security issues. If you are using something insecure,...
The post safety: checks your installed dependencies for known security vulnerabilities appeared first on Penetration Testing Tools.
SCCMSecrets SCCMSecrets.py is an SCCM policies exploitation tool. It goes beyond NAA credentials extraction, and aims to provide a comprehensive approach regarding SCCM policies exploitation. The tool can be executed from various levels of...
The post SCCMSecrets: exploit SCCM policies distribution for credentials harvesting, initial access and lateral movement appeared first on Penetration Testing Tools.
grype A vulnerability scanner for container images and filesystems. Easily install the binary to try it out. Features Scan the contents of a container image or filesystem to find known vulnerabilities. Find vulnerabilities for major...
The post grype: vulnerability scanner for container images and filesystems appeared first on Penetration Testing Tools.
