AI Exploits The AI world has a security problem and it’s not just in the inputs given to LLMs such as ChatGPT. Based on research done by Protect AI and independent security experts on the Huntr Bug...
The post AI Exploits: A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities appeared first on Penetration Testing Tools.
Obfu[DE]scate Obfu[DE]scate is a Python tool designed to simplify the process of de-obfuscating and comparing two versions of an Android APK – even if the functions have been renamed as part of obfuscation. With...
The post Obfu[DE]scate: De-obfuscation and Comparison tool for Android APKs appeared first on Penetration Testing Tools.
AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. How it works AutoTimeline automates this workflow: Identify the correct volatility profile for the memory image. Runs the timeliner plugin against volatile memory dump using volatility. Runs the mftparser volatility...
The post autotimeliner: Automagically extract forensic timeline from volatile memory dump appeared first on Penetration Testing Tools.
STRIDE GPT STRIDE GPT is an AI-powered threat modeling tool that leverages OpenAI’s GPT models to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application...
The post STRIDE GPT: An AI-powered threat modeling tool appeared first on Penetration Testing Tools.
EDRaser EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated...
The post EDRaser: powerful tool for remotely deleting access logs, Windows event logs, databases appeared first on Penetration Testing Tools.
Deepfake Offensive Toolkit dot (aka Deepfake Offensive Toolkit) makes real-time, controllable deepfakes ready for virtual camera injection. dot is created for performing penetration testing against e.g. identity verification and video conferencing systems, for the use by...
The post dot: The Deepfake Offensive Toolkit appeared first on Penetration Testing Tools.
WPProbe is a fast and efficient WordPress plugin scanner that leverages REST API enumeration (?rest_route) to detect installed plugins without brute-force. Unlike traditional scanners that hammer websites with requests, WPProbe takes a smarter approach by querying the exposed REST API....
The post wpprobe: A fast WordPress plugin enumeration tool appeared first on Penetration Testing Tools.
Web Shell Analyzer Web shell analyzer is a cross-platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is...
The post Web Shell Analyzer: Web shell scanner and analyzer appeared first on Penetration Testing Tools.
Ghost Scheduled Task While using scheduled tasks as a means of persistence is not a novel approach, threat actors have employed various techniques to conceal their malicious tasks. A notable method involves removing the SD...
The post Ghost Scheduled Task: scheduled task for both persistence and lateral movement appeared first on Penetration Testing Tools.
Stifle Nearly a year ago, Jonas Knudsen (@Jonas_B_K) over at SpecterOps published a blog titled “ADCS ESC14 Abuse Technique”, covering a previously known technique for leveraging Active Directory Certificate Services (ADCS) for multiple types...
The post Stifle: .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS appeared first on Penetration Testing Tools.
SRUM-DUMP2 SRUM Dump extracts information from the System Resource Utilization Management Database and creates an Excel spreadsheet. The SRUM is one of the best sources for applications that have run on your system in...
The post SRUM Dump: extracts information from the System Resource Utilization Management Database appeared first on Penetration Testing Tools.
Nebula Nebula is an AI-powered assistant specifically designed for the field of ethical hacking. It provides a unique capability for users to input commands using natural language processing, facilitating a seamless transition from intent...
The post nebula: AI-Powered Ethical Hacking Assistant appeared first on Penetration Testing Tools.
OdinLdr Cobaltstrike UDRL for beacon and post-ex tools. Use NtApi call with synthetic stackframe to confuse EDR based on stackframe detection. Beacon Use BeaconUserData structure to give memory information to beacon and allocate memory...
The post OdinLdr: Cobaltstrike Reflective Loader with Synthetic Stackframe appeared first on Penetration Testing Tools.
pcfg_cracker This project uses machine learning to identify password creation habits of users. A PCFG model is generated by training on a list of disclosed plaintext/cracked passwords. In the context of this project, the...
The post pcfg_cracker: perform research into how humans generate passwords appeared first on Penetration Testing Tools.
Introduction “Forensic Image Analysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with...
The post sherloq: open-source digital image forensic toolset appeared first on Penetration Testing Tools.
OWASP OFFAT OWASP OFFAT (OFFensive Api Tester) is created to automatically test API for common vulnerabilities after generating tests from the openapi specification file. It provides the feature to automatically fuzz inputs and use...
The post OFFAT: OFFensive Api Tester appeared first on Penetration Testing Tools.
Invoke-ADEnum Active Directory Enumeration Invoke-ADEnum is an Active Directory enumeration tool designed to automate the process of gathering information from an Active Directory environment, leveraging the capabilities of PowerView. With Invoke-ADEnum, you can quickly...
The post Invoke-ADEnum: Automate Active Directory Enumeration using PowerView appeared first on Penetration Testing Tools.
PortexAnalyzerGUI Graphical interface for PortEx, a Portable Executable and Malware Analysis Library PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly...
The post PortexAnalyzerGUI: Portable Executable and Malware Analysis Library appeared first on Penetration Testing Tools.
Sunder Windows rootkit modeled after Lazarus Group’s FudModule rootkit. Reference this version of Sunder for an example of the appid.sys driver exploit, which was utilized by Lazarus Group FudModule rootkit. Sunder’s vulnerable driver in this GitHub repository...
The post Sunder: Windows rootkit designed to work with BYOVD exploits appeared first on Penetration Testing Tools.
HFish It is a cross-platform honeypot platform developed based on golang, which has been meticulously built for enterprise security Multi-function： Not just support HTTP(S) Pot，It also supports SSH、SFTP、Redis、Mysql、FTP、Telnet、Deep etc. Expansibility： Provide API Interface，Users can expand honeypot module at...
The post HFish: cross platform honeypot platform appeared first on Penetration Testing Tools.
