Showing posts with label Pentest Tools. Show all posts
Showing posts with label Pentest Tools. Show all posts
Wednesday, March 13, 2024

swaggerHole - A Python3 Script Searching For Secret On Swaggerhub

›
Introduction  This tool is made to automate the process of retrieving secrets in the public APIs on [swaggerHub](https://app.swaggerhub.com...
Sunday, February 18, 2024

AzSubEnum - Azure Service Subdomain Enumeration

›
AzSubEnum is a specialized subdomain enumeration tool tailored for Azure services. This tool is designed to meticulously search and identify...

ADCSync - Use ESC1 To Perform A Makeshift DCSync And Dump Hashes

›
This is a tool I whipped up together quickly to DCSync utilizing ESC1. It is quite slow but otherwise an effective means of performing a m...

Logsensor - A Powerful Sensor Tool To Discover Login Panels, And POST Form SQLi Scanning

›
A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features login panel Scanning for multiple hosts Prox...

WebCopilot - An Automation Tool That Enumerates Subdomains Then Filters Out Xss, Sqli, Open Redirect, Lfi, Ssrf And Rce Parameters And Then Scans For Vulnerabilities

›
WebCopilot is an automation tool designed to enumerate subdomains of the target and detect bugs using different open-source tools. The sc...

CATSploit - An Automated Penetration Testing Tool Using Cyber Attack Techniques Scoring

›
CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring (CATS) method that can be used without pentester....

D3m0n1z3dShell - Demonized Shell Is An Advanced Tool For Persistence In Linux

›
Demonized Shell is an Advanced Tool for persistence in linux. Install git clone https://github.com/MatheuZSecurity/D3m0n1z3dShell.git ...

KnowsMore - A Swiss Army Knife Tool For Pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS And DCSync)

›
KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file (generated by CrackMapExec or...

CLZero - A Project For Fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors

›
A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this too...
Thursday, October 18, 2018

Raccoon - A High Performance Offensive Security Tool For Reconnaissance And Vulnerability Scanning

›
Offensive Security Tool for Reconnaissance and Information Gathering. Features DNS details DNS visual mapping using DNS dumpst...
Sunday, August 12, 2018

Grok-backdoor - Backdoor With Ngrok Tunnel Support

›
Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the communication. Ngrok-backdoor can generate windows,...