A package of Pentest scripts I have made or commonly use Contents: Wordlists – Comprises of password lists, username lists and subdomains Web Service finder – Finds web services of a list of IPs and also...
The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET has quickly become a standard tool in a penetration testers arsenal. SET is written by David Kennedy (ReL1K)...
Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security’s premium reporting add-on for Professional Penetration Testers, Bug...
Kali Linux is designed for penetration testing. Whether the penetration tester’s starting point is white-box testing, black-box testing, or gray-box testing, there are always steps to follow when performing penetration testing with Kali or...
Capsulecorp Pentest The Capsulecorp Pentest is a small virtual network managed by vagrant and ansible. It contains five virtual machines, including one Linux attacking system running Xubuntu and 4 Windows 2019 servers configured with...
The web application uses templates to make the web pages look more dynamic. Server Side Template Injection occurs when user input is embedded in a template in an unsafe manner. However, in the initial...
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others. Contents Contents Network Analysis IP Whois DNS Identify Live Hosts IDS/IPS...
XPath Injection Similar to SQL injection, XPath injection occurs when the site uses the information entered by the user to construct the request for XML data. An attacker sends specially constructed information to the...
Let’s talk about the hash crack through post / hashdump and john (john the ripper) of the Metasploit module. Once the meterpreter shell is injected and driven into the target pc, the shell connection...
Think like a Hacker to Secure the Organization like a Fortress The reality of external attacks today is simple: Attackers have made it their business to know more about the networking environment you work...
