Knockpy – Enumerate Subdomain Scanner
Knockpy is a python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan forDNS zone transfer and to try to bypass the wildcard DNS record automatically...
View ArticleComission – WhiteBox CMS Analysis
CoMisSion is a tool to quickly analyze a CMS setup. The tool: checks for the core version; looks for the last core version; looks for vulnerabilities in core version used; checks for plugins version;...
View ArticleSobelow – Security-Focused Static Analysis for the Phoenix Framework
Sobelow is a security-focused static analysis tool for the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it...
View ArticleWINspect – Powershell-based Windows Security Auditing Toolbox
WINspect is part of a larger project for auditing different areas of Windows environments. It focuses on enumerating different parts of a Windows machine aiming to identify security weaknesses and...
View ArticleRedSnarf – A Pen-Testing / Red-Teaming Tool For Windows Environments
RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques. RedSnarf...
View ArticleNili – Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering...
Nili is a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing. Prerequisites Python – Python Programming Language Scapy – Interactive Packet Manipulation Program Netzob –...
View ArticleTulpar — open source web vulnerability scanner
Tulpar is a open source web vulnerability scanner for written to make web penetration testing automated. Features Sql Injection (GET Method) XSS (GET Method) Crawl E-mail Disclosure Credit Card...
View ArticleReaver Download – Hack WPS Pin WiFi Networks
Reaver download below, this tool has been designed to be a robust and practical tool to hack WPS Pin WiFi Networks using WiFi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2...
View Articlesdnpwn – An SDN Penetration Testing Toolkit
The Open Networking Foundation defines SDN as “The physical separation of the network control plane from the forwarding plane, and where a control plane controls several devices”. What this means is...
View ArticleD0xk1t – Web-based OSINT and Active Reconaissance Suite
Active reconnaissance, information gathering and OSINT built in a portable web application. 1.0 Introduction What is this? D0xk1t is an open-source, self-hosted and easy to use OSINT and active...
View ArticleUniByAv – Shellcode Obfuscator Anti-Virus Friendly
UniByAv is a simple obfuscator that take raw shellcode and generate executable that are Anti-Virus friendly. The obfuscation routine is purely writtend in assembly to remain pretty short and efficient....
View ArticleWikto Scanner Download – Web Server Security Tool
Wikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900...
View ArticlePiFinger – Searches For Wifi-Pineapple Traces And Calculate Wireless Network...
The purpose of this project is to determine whether the network we are connected for is opened by Wifi- Pineapple. In addition, the tool analyzes the wireless networks you have previously connected and...
View ArticleXFLTReaT – Tunnelling Framework
This is just one thing of many things that was missing from the Internet. If you got tired of trying several tunnelling tools for each protocols, this must be your tool framework. Available modules TCP...
View ArticlePython Taint – A Static Analysis Tool for Detecting Security Vulnerabilities...
Static analysis of Python web applications based on theoretical foundations (Control flow graphs, fixed point, dataflow analysis) Features Detect Command injection Detect SQL injection Detect XSS...
View Articledcrawl – Web Crawler For Unique Domains
dcrawl is a simple, but smart, multithreaded web crawler for randomly gathering huge lists of unique domain names. How does dcrawl work? dcrawl takes one site URL as input and detects all a href= links...
View ArticleDKMC – Malicious Payload Evasion Tool
Don’t kill my cat is a tool that generates obfuscated shellcode that is stored inside of polyglot images. The image is 100% valid and also 100% valid shellcode. The idea is to avoid sandbox analysis...
View ArticleNorkNork – Powershell Empire Persistence Finder
This script was designed to identify Powershell Empire persistence payloads on Windows systems. It currently supports checks for these persistence methods: Scheduled Tasks Auto-run WMI subscriptions...
View ArticleDGA-Detection – DGA Domain Detection using Bigram Frequency Analysis
More and more malware is being created with advanced blocking circumvention techniques. One of the most prevalent techniques being used is the use of Domain Generation Algorithms which periodically...
View ArticleLiMEaide – Tool to remotely dump RAM of a Linux client
LiMEaide is a python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysison your local host. I hope that this will simplify Linux digital...
View Article