wesng v1.03 releases: Windows Exploit Suggester
Windows Exploit Suggester – Next Generation (WES-NG) WES-NG is a tool based on the output of Windows’ systeminfo utility that provides you with the list of vulnerabilities the OS is vulnerable...
Category: Vulnerability Analysis
DCOMrade: enumerating vulnerable DCOM Applications
DCOMrade DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc. The script is...
archerysec v2.0.5 released: Open Source Vulnerability Assessment and Management
Archery is an opensource vulnerability assessment and management tool which helps developers and pentesters to perform scans and manage vulnerabilities. Archery uses popular opensource tools to perform comprehensive scanning for...
getsploit v1.0 releases: searching and downloading exploits
getsploit Command line search and download tool for Vulners Database inspired by searchsploit. It allows you to search online for the exploits across all the most popular collections: Exploit-DB, Metasploit, Packetstorm, and others. The most powerful...
docker_offensive_elk: Elasticsearch for Offensive Security
Offensive ELK: Elasticsearch for Offensive Security Traditional “defensive” tools can be effectively used for Offensive security data analysis, helping your team collaborate and triage scan results. In particular, Elasticsearch offers...
JNDIAT v2.0 releases: tests the security of Weblogic servers through T3 protocol
JNDIAT – JNDI Attacking Tool JNDIAT (JNDI Attacking Tool) is an open source penetration testing tool that tests the security of Weblogic servers through the T3 protocol. Usage examples of JNDIAT: You want to search if...
goscan v2.4 releases: Interactive Network Scanner
GoScan GoScan is an interactive network scanner client, featuring auto-complete, which provides abstraction and automation over nmap. It can be used to perform host discovery, port scanning, and service enumeration in...
Sheepl v2.0 releases: a tool for blue team and red team
sheepl Sheepl: Creating realistic user behaviour for supporting tradecraft development within lab environments Introduction There are lots of resources available online relating to how you can build AD network environments...
msf-autoshell: Give it a .nessus file and it’ll get you Metasploit shells
msf-autoshell Give it a .nessus file and it’ll get you Metasploit shells. I’ve included the early and incomplete programs to make it easier for people who want to learn how...
sparta 1.0.4 BETA releases: Network Infrastructure Penetration Testing Tool
SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time...
vulners-lookup: Perform vulnerabilities lookup on Vulners, the largest vulnerabilities & exploits database
Vulners-lookup A small script to perform vulnerabilities/exploits lookup on Vulners Database (https://vulners.com/). Vulners aggregates lots of various sources (including exploit-db, 0day.today, Nessus db, OpenVAS db…), see https://vulners.com/stats for a complete list. This...
MicroBurst: A collection of scripts for assessing Microsoft Azure security
MicroBurst: A PowerShell Toolkit for Attacking Azure MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post exploitation actions such as credential dumping. It is...
bscan: an asynchronous target enumeration tool
bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console output and a...
nightcall: Automated Enumeration Script for Pentesting
Nightcall Automated enumeration script built to reduce repetitive tasks during large network pentests. Initial host discovery performed by basic throttled masscan, followed by service enumeration of each host, full port...
SIET: Smart Install Exploitation Tool
SIET Smart Install Exploitation Tool Cisco Smart Install is a plug-and-play configuration and image-management feature that provides zero-touch deployment for new switches. You can ship a switch to a location,...
