Loki: like Prometheus, but for logs. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost-effective and easy to operate. It does not index the contents...
The post Loki: horizontally-scalable, highly-available, multi-tenant log aggregation system appeared first on Penetration Testing Tools.
ssh-mitm – intercept ssh traffic ssh-mitm is an intercepting (mitm) proxy server for security audits. Redirect/mirror Shell to another ssh client supported in 0.2.8 Replace File in SCP supported in 0.2.6 Replace File in SFTP...
The post ssh-mitm: intercepting proxy server for security audits appeared first on Penetration Testing Tools.
Kraken Kraken is a powerful, Python-based tool designed to centralize and streamline various brute-forcing tasks. Kraken provides a suite of tools for cybersecurity professionals to efficiently perform brute-force attacks across a range of protocols and...
The post Kraken: All-in-One Toolkit for BruteForce Attacks appeared first on Penetration Testing Tools.
Cryptomator Cryptomator is provided free of charge as an open-source project despite the high development effort and is therefore dependent on donations. Cryptomator offers multi-platform transparent client-side encryption of your files in the cloud....
The post cryptomator: Multi-platform transparent client-side encryption of your files in the cloud appeared first on Penetration Testing Tools.
kics KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud-native project. Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx....
The post kics: Find security vulnerabilities, compliance issues, and infrastructure misconfigurations appeared first on Penetration Testing Tools.
LayeredSyscall Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR hooks in Windows. The general idea is to generate a legitimate call stack before...
The post LayeredSyscall – Abusing Vectored Exception Handling to Bypass EDRs appeared first on Penetration Testing Tools.
Remote Method Guesser Remote Method Guesser (rmg) is a command-line utility written in Java and can be used to identify security vulnerabilities on Java RMI endpoints. Currently, the following operations are supported: List available bound names and their...
The post Remote Method Guesser: Java RMI enumeration and bruteforce of remote methods appeared first on Penetration Testing Tools.
HybridTestFramewrok In the era of the cloud-native world, we cannot stick to a particular framework, however, due to project requirements we often need to evolve the existing testing solution in such a way that...
The post HybridTestFramewrok: End to End automation testing of Web, API and Security appeared first on Penetration Testing Tools.
MyMSIAnalyzer You have probably come across MSI files quite often. They are used by software manufacturers to provide their programs. This format is more convenient than the standard EXE format for the following reasons:...
The post MyMSIAnalyzer: Analyse MSI files for vulnerabilities appeared first on Penetration Testing Tools.
kubeclarity KubeClarity is a tool for the detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems. It scans both runtime K8s clusters and CI/CD pipelines for enhanced...
The post kubeclarity: tool for detection and management of (SBOM) and vulnerabilities of container images and filesystems appeared first on Penetration Testing Tools.
Watcher Watcher is a Django & React JS automated platform for discovering new potential cybersecurity threats targeting your organization. It should be used on web servers and available on Docker. Watcher capabilities Detect emerging...
The post Watcher: Open Source Cybersecurity Threat Hunting Platform appeared first on Penetration Testing Tools.
SHELLSILO SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the process of constructing and utilizing structures, assigning variables, and making system calls. With this...
The post SHELLSILO: Simplifying Syscall Assembly and Shellcode Creation appeared first on Penetration Testing Tools.
BPF Compiler Collection (BCC) BCC is a toolkit for creating efficient kernel tracing and manipulation programs and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known...
The post BPF Compiler Collection: BPF-based Linux IO analysis, networking, monitoring, and more appeared first on Penetration Testing Tools.
SharpDPAPI SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi‘s Mimikatz project. The SharpChrome subproject is an adaptation of work from @gentilkiwi and @djhohnstein, specifically his SharpChrome project. However, this version of SharpChrome uses a different version of the C# SQL library that...
The post SharpDPAPI: C# port of some Mimikatz DPAPI functionality appeared first on Penetration Testing Tools.
Interactive PDF Analysis Interactive PDF Analysis (also called IPA) allows any researcher to explore the inner details of any PDF file. PDF files may be used to carry malicious payloads that exploit vulnerabilities and...
The post Interactive PDF Analysis: GUI analyzer for deep-diving into PDF files appeared first on Penetration Testing Tools.
SlackEnum A user enumeration tool for Slack. Setup Clone this repository and install the necessary dependencies with the commands below. Create the cookies_dir and http_requests_dir folders defined in the settings at the top of slackenum.py. By default, these are slack_ids-cookiebro and slack_ids-burp and...
The post SlackEnum: A user enumeration tool for Slack appeared first on Penetration Testing Tools.
LNAV — The Logfile Navigator The log file navigator, lnav, is an enhanced log file viewer that takes advantage of any semantic information that can be gleaned from the files being viewed, such as...
The post lnav: an enhanced log file viewer appeared first on Penetration Testing Tools.
Knows More KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync). Main features Import NTLM Hashes from .ntds output txt file (generated by CrackMapExec or...
The post knowsmore: A swiss army knife tool for pentesting Microsoft Active Directory appeared first on Penetration Testing Tools.
Malwoverview Malwoverview.py is a first response tool for threat hunting, which performs an initial and quick triage of malware samples, URLs, IP addresses, domains, malware families, IOCs and hashes. Additionally, Malwoverview is able to...
The post malwoverview: perform an initial and quick triage on a directory containing malware samples appeared first on Penetration Testing Tools.
ronin Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter IPs/hosts/URLs, querying ASNs, querying DNS, HTTP, scanning...
The post ronin: Ruby platform for vulnerability research and exploit development appeared first on Penetration Testing Tools.
