Information Gathering / Vulnerability Analysis
by do son · Published August 21, 2018 · Last modified August 10, 2021
Scantron Scantron is a distributed nmap scanner comprised of two components. The first is a master node that consists of a web front end used for scheduling scans and storing nmap scan targets and...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published August 15, 2018
FireShodanMap is a Real-time map that integrates Firebase, Google Maps, and Shodan. A search is carried out using Shodan searching for vulnerable devices and they are shown on the map for analysis. All data...
Forensics / Information Gathering / Network PenTest / Vulnerability Analysis
by do son · Published August 13, 2018 · Last modified October 10, 2021
RedHunt Linux Distribution Virtual Machine for Adversary Emulation and Threat Hunting RedHunt aims to be a one-stop shop for all your threat emulation and threat hunting needs by integrating attacker’s arsenal as well as...
Cloud Security Suite CS Suite is a one-stop tool for auditing the security posture of the AWS infrastructure and does system audits as well. CS Suite leverages current open source tools capabilities and has...
Metateta Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit For faster pen testing for large networks What You Can Do Scanning with all Metasploit modules for specific network Protocol like SMB,...
SkyArk is a cloud security project with two helpful sub-modules – AWStealth and AWStrace. To help the cloud community in the effort of making cloud environments more secure. SkyArk currently focuses on mitigating the...
Metasploit auto auxiliary script (msfenum) Msfenum simplifies running multiple auxiliary modules on a specific set of targets. Running a low hanging fruit scan within a penetration test can be very useful, for example, to...
Grouper A PowerShell script for helping to find vulnerable settings in AD Group Policy. Summary Grouper is a slightly wobbly PowerShell module designed for pen-testers and red teamers (although probably also useful for sysadmins)...
Information Gathering / Network PenTest / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 1, 2018
Watchog is an integration of open source security tools aimed to provide a holistic security view for a given domain/IP. The way Watchdog is built it can be used by product security teams, red teams...
BTA BTA is an open-source Active Directory security audit framework. Its goal is to help auditors harvest the information they need to answer such questions as: Who has rights over a given object (computer,...
Invoke-ADLabDeployer Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams. During red teaming gigs, we encounter many different setups for our clients. To test our payloads and...
Passive Network Audit Framework (PNAF) PNAF is a framework intended to provide the capability of getting a security assessment of network platforms by analyzing in-depth the network traffic (in a passive way) and by...
Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon – HackSmith v1.0. Capabilities Scan a network (a particular subnet or a list of IP...
Red Baron is a set of modules and custom/third-party providers for Terraform which tries to automate creating resilient, disposable, secure and agile infrastructure for Red Teams. During Red Team assessments, infrastructure creation and management can be a huge...
Linux Exploit Suggester 2 Next-generation exploit suggester based on Linux_Exploit_Suggester Key Improvements Include: More Exploits! (Last updated: April 15, 2018) Accurate wildcard matching. This expands the scope of searchable exploits. Output colorization for easy viewing....
Secure Your Connection
