Katana A next-generation crawling and spidering framework Feature Fast And fully configurable web crawling Standard and Headless mode support JavaScript parsing / crawling Customizable automatic form filling Scope control – Preconfigured field / Regex Customizable output –...
Spartacus DLL Hijacking Spartacus is utilising the SysInternals Process Monitor and is parsing raw PML log files. You can leave ProcMon running for hours and discover 2nd and 3rd level (ie an...
Nuclear Pond Nuclear Pond is used to leverage Nuclei in the cloud with unremarkable speed and flexibility, and perform internet-wide scans for far less than a cup of coffee. It leverages...
KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure-based attack surfaces from a black-box perspective. This tool is a community version of the tool used to probe for...
NTLMRecon NTLMRecon is a Golang version of the original NTLMRecon utility written by Sachin Kamath (AKA pwnfoo). NTLMRecon can be leveraged to perform brute forcing against a targeted web server...
OMLASP OMLASP – Open Machine Learning Application Security Project is intended to become a standard for auditing Machine Learning algorithms. It will not only focus on the security of the algorithms...
PowerMeUp This is a powershell reverse shell that executes the commands and or scripts that you add to the powerreverse.ps1 file as well as a small library of Post-Exploitation scripts....
KeeFarce Reborn A standalone DLL that exports databases in cleartext once injected in the KeePass process. Yet another KeePass extraction tool, why? A few years ago, @denandz released KeeFarce, the first offensive tool...
geacon_pro geacon_pro is an Anti-Virus bypassing CobaltStrike Beacon written in Golang based on the geacon project. geacon_pro supports CobaltStrike version 4.1+ geacon_pro has implemented most functions of Beacon. The core of...
REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability...
DNS Analysis Server Tools to assess DNS security. This is an updated and more generic version of the DNS Reset Checker. Background DNS security? The DNS (Domain Name System) is a...
RustHound RustHound is a cross-platform BloodHound collector tool, written in Rust. (Linux, Windows, MacOS) No anti-virus detection and cross-compiled. RustHound generates users, groups, computers, ous, gpos, containers, domains json files to analyze...
deepce Docker Enumeration, Escalation of Privileges, and Container Escapes (DEEPCE) In order for it to be compatible with the maximum number of containers DEEPCE is written in pure sh with no...
Nimbo-C2 Nimbo-C2 is yet another (simple and lightweight) C2 framework. Nimbo-C2 agent currently supports Windows x64 only. It’s written in Nim, with some usage of .NET (by dynamically loading the...
PersistAssist PersistAssist is a fully modular persistence framework written in C#. All persistence techniques contain a cleanup method which will serve to remove the persistence aside from the persistence code....
Support Securityonline.info site. Thanks!
