Wednesday, February 1, 2023

New Tools

Villain : Windows And Linux Backdoor Generator And Multi-Session Handler

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and...

PXEThief : Extract Passwords From The Operating System Deployment Functionality

PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager (https://forum.defcon.org/node/241925)...

Cypherhound : Terminal Application That Contains 260+ Neo4j Cyphers For BloodHound Data Sets

Cypherhound a Python3 terminal application that contains 260+ Neo4j cyphers for BloodHound data sets. Why? BloodHound is a staple tool for every red teamer. However, there...

Subparse : Modular Malware Analysis Artifact Collection And Correlation Framework

Subparse, is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files...

Should South East Asian Tech Startups Consider Outsourcing Support?

Southeast Asian tech startups are attracting attention for all the right reasons. Global markets cannot get enough of the innovative technological solutions coming from...

AzureHound : Azure Data Exporter For BloodHound

AzureHound is a bloodHound data collector for Microsoft Azure. Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling...

Xerror – An Automated Penetration Testing Tool With GUI

Xerror is an automated pentesting tool, which helps security professionals and nonprofessionals to automate their pentesting tasks. It will perform all tests and, at...

Mongoaudit – An Audit and Pentesting Tool for MongoDB Databases

Databases typically store sensitive data or data that is important for the company. Mongoaudit helps to audit several technical aspects of running a MongoDB...

ADFSRelay : Proof Of Concept Utilities Developed To Research NTLM Relaying Attacks Targeting ADFS

ADFSRelay is a repository includes two utilities NTLMParse and ADFSRelay. NTLMParse is a utility for decoding base64-encoded NTLM messages and printing information about the...

Protecting Kubernetes Deployments with Azure Sentinel

What Is Azure Sentinel? Microsoft Sentinel is a cloud native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution. It...

Tools

SocialPwned : An OSINT Tool That Allows To Get The Emails, From A Target,...

0
SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter to...
SIEM Guide

SIEM – Security Information and Event Management Tools – A Beginner’s Guide

0
What is a SIEM? SIEM, when expanded, becomes Security Information Event Management. As its name suggests,  the primary function of a SIEM is Event management....

SUB 404 : A Fast Tool To Check Subdomain Takeover Vulnerability

0
Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it...

Online Password Bruteforce with Hydra-GTK

0
Hydra (better known as "thc-hydra") is an online password attack tool. It brute forces various combinations on live services like telnet, ssh, http, https,...

Netdiscover – Live Host Identification

0
Netdiscover - simple ARP Scanner to scan for live hosts in a network Netdiscover is a simple ARP scanner that can be used to scan...

Havij Download – Advanced Automated SQL Injection Tool

0
Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It's a completely...