Network PenTest / Password Attacks / Vulnerability Analysis / Web Vulnerability Analysis / WebApp PenTest
by do son · Published May 2, 2018
Passhunt Passhunt is a simple tool for searching for default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords. How to install? How do I...
Exploitation / Forensics / Information Gathering / Network PenTest / Reverse Engineering / Sniffing & Spoofing / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest / Wireless
by do son · Published April 25, 2018
PloitKit is a Python-based GUI tool designed as one-stop for all other software. I was facing these kinds of problem when I need to switch to the different system, or I lost my pen-drive....
Information Gathering / Vulnerability Analysis / Web Information Gathering
by do son · Published April 7, 2018 · Last modified October 25, 2021
envizon – the network visualization tool This tool is designed, developed, and supported by evait security. In order to give something back to the security community, we publish our internally used and developed, state-of-the-art...
password_pwncheck Enterprise Password Quality Checking using any hash data sources (HaveIBeenPwned lists, et al) The purpose of this project is to help companies maintain a stronger password policy without having to jump through too...
Exploitation / Information Gathering / Network PenTest / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published March 18, 2018
EternalView EternalView is an all in one basic information gathering tool Features: Feature Explanation Whois Information Prints the whois information of the entered web address DNS lookup Prints the DNS information and web records...
Network PenTest / Vulnerability Analysis
by do son · Published February 22, 2018 · Last modified October 10, 2021
#DomainLockDown DLD was written for the AD admin who either isn’t sure what best practices to use to secure their domain controllers or how best to secure their DA accounts (which do need handling....
Network PenTest / Vulnerability Analysis
by do son · Published February 5, 2018 · Last modified June 14, 2018
SSH-Weak-DH This tool establishes SSH connections to a server, thereby enumerating through various client configurations, in order to determine whether the server allows a Diffie-Hellman (DH) key exchange based on a weak group. We...
Network PenTest / Post Exploitation / Vulnerability Analysis
by do son · Published January 28, 2018 · Last modified May 6, 2018
linux exploit suggester.sh was inspired by the excellent Linux_Exploit_Suggester script by PenturaLabs. The issue with Pentura’s script, however, is that it isn’t up to date anymore (the script was last updated in early 2014) so it lacks...
Information Gathering / Network PenTest / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published January 20, 2018
ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets. The project currently consists of...
Information Gathering / Network PenTest / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published January 12, 2018
Host Scanner The purpose of this project is to implement a network scanner with both active and passive data acquisition components, which can then autonomously identify services using the latest CPE dictionary from NIST...
vulners-scanner PoC of a host-based vulnerability scanner, which uses vulners.com API. Detects operating system, collects installed packages and checks vulnerabilities in it. Supported OS Currently, support collecting packages for these operating systems: Debian-based (Debian,...
Information Gathering / Network PenTest / Password Attacks / Vulnerability Analysis
by do son · Published December 31, 2017 · Last modified October 10, 2021
lyncsmash a collection of tools to enumerate and attack self-hosted Skype for Business and Microsoft Lync installations Note: these tools will not work with Skype/Lync installations hosted at Microsoft. Download git clone https://github.com/nyxgeek/lyncsmash.git scripts lyncsmash.py...
XDiFF is an Extended Differential Fuzzing Framework built to find vulnerabilities. Its goal is to collect as much valuable data as possible and then to infer all potential vulnerabilities in the application/s. Vulnerabilities can...
Network PenTest / Vulnerability Analysis / Web Vulnerability Analysis / WebApp PenTest
by do son · Published December 3, 2017
Bash Scanner is a fast and reliable way to scan your server for outdated software and potential exploits. Supported software The Bash Scanner currently detects the following software for updates (keep in mind, this...
Nmap is a network connection scanning software, used to scan the Internet computer open network connection. Determine which services are running on those connections, and infer which operating system the computer is running (which...
Secure Your Connection
