Showing posts with label Pentest. Show all posts
Showing posts with label Pentest. Show all posts
Sunday, February 18, 2024

ADCSync - Use ESC1 To Perform A Makeshift DCSync And Dump Hashes

›
This is a tool I whipped up together quickly to DCSync utilizing ESC1. It is quite slow but otherwise an effective means of performing a m...

CLZero - A Project For Fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors

›
A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this too...
Friday, February 4, 2022

Smuggler - An HTTP Request Smuggling / Desync Testing Tool

›
An HTTP Request Smuggling / Desync testing tool written in Python 3 IMPORTANT This tool does not guarantee no false-positives or false-n...
Thursday, October 18, 2018

Raccoon - A High Performance Offensive Security Tool For Reconnaissance And Vulnerability Scanning

›
Offensive Security Tool for Reconnaissance and Information Gathering. Features DNS details DNS visual mapping using DNS dumpst...
Sunday, August 26, 2018

Kali Linux 2018.3 Release - Penetration Testing and Ethical Hacking Linux Distribution

›
Kali 2018.3 brings the kernel up to version 4.17.0 and while 4.17.0 did not introduce many changes, 4.16.0 had a huge number of addi...

Airba.sh - A POSIX-compliant, Fully Automated WPA PSK Handshake Capture Script Aimed At Penetration Testing

›
Airbash is a POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing. It is compatible ...
Sunday, August 12, 2018

Grok-backdoor - Backdoor With Ngrok Tunnel Support

›
Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the communication. Ngrok-backdoor can generate windows,...
Friday, July 20, 2018

CloudFrunt - A Tool For Identifying Misconfigured CloudFront Domains

›
CloudFrunt is a tool for identifying misconfigured CloudFront domains. Background CloudFront is a Content Delivery Network (CDN)...

goGetBucket - A Penetration Testing Tool To Enumerate And Analyse Amazon S3 Buckets Owned By A Domain

›
When performing a recon on a domain - understanding assets they own is very important. AWS S3 bucket permissions have been confused ti...
Wednesday, July 4, 2018

WPSeku v0.4 - Wordpress Security Scanner

›
WPSeku is a black box WordPress vulnerability scanner that can be used to scan remote WordPress installations to find security ...

Nmap 7.70 - Free Security Scanner: Better service and OS detection, 9 new NSE scripts, new Npcap, and much more

›
Nmap ("Network Mapper") is a free and open source utility for network discovery and security auditing. Many systems ...