Adding A Hardware Profile : A Step-by-Step Tutorial For System Configuration
If you need to add new hardware you have to follow the following process: Create a hardware profile {name}.yaml file and name it as you wish. For example, default.yaml which should be stored in the hardware directory Then add variables to the profile description using YAML. Each variable has its role during processing. They are described in "Hardware parameters documentation" name: "default" description:...
dnsx – A Comprehensive DNS Toolkit For Advanced Network Probing
dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS queries, user supplied resolvers, DNS wildcard filtering like shuffledns etc. Features Simple and Handy utility to query DNS records. A, AAAA, CNAME, PTR, NS, MX, TXT, SRV, SOA query support DNS Resolution / Brute-force support Custom resolver input support Multiple resolver format (TCP/UDP/DOH/DOT) support stdin and stdout support Automatic wildcard handling support Installation Instructions dnsx requires go1.21 to install successfully. Run the following command to install the latest version: go install...
MEID-SignIns-TorExitNodes : Leveraging Microsoft Sentinel To Monitor And Manage Tor Network Access
This KQL query retrieves all Tor exit nodes from the official tor project website. Tor exit nodes are the gateways of the communication flow between the Tor client and the destination server (after leaving the Tor network). Any request coming from one of these IP addresses indicates that the request came from the Tor network. This query can be used...
MultCheck : A User-Friendly, Open-Source Malware AV Testing Tool
An innovative, open-source tool designed to streamline malware analysis by testing the effectiveness of multiple antivirus (AV) engines simultaneously. Developed by the resourceful @Pengrey, MultCheck stands out for its user-friendly interface and customizable framework, allowing users to easily integrate new AV engines as needed. Whether you're a cybersecurity professional or an enthusiast, MultCheck provides a practical solution for assessing...
CLay – Enhancing Web Security hrough Deceptive Reverse Proxies
CLay offers a unique and powerful feature that goes beyond traditional security measures. CLay takes deception to a new level by mimicking the appearance of a website with information from a different framework. The primary objective is to mislead and deceive potential attackers, leading them to gather false information about the web application. Features Request filtering by User Agent HTML Comment Filtering Informative...
Entraspray – Enhancing Password Spraying Tools For Microsoft Azure Security
Entraspray is a rewrite of MSOLSpray in python. The main purpose of this tool remains the same: to perform password spraying against Microsoft Azure accounts while also providing detailed information about account status and errors; such as if MFA is enabled, if a tenant or user doesn't exist, if the account is locked or disabled and more. Enhancements: The script will remove "compromised"...
IAT-Tracer V2 : Streamlining API Function Tracing For Enhanced Cybersecurity
IAT-Tracer V2 is a plugin for Tiny-Tracer framework (by @hasherezade) for automatically detecting and resolving functions' parameters out of the IAT or trace logs (.tag files) of PE files. The plugin has a GUI that allows the user to choose what imported or called functions to trace and watch and then automatically fills the parameters (library, function's name, and the number...
Gouge – The Essential Burp Suite Extension For URL Extraction
Gouge is a Burp Suite extension to extract or GOUGE all URLs. It is a Burp Suite extension written in Python and uses the Burp Suite API to extract URLs from a webpage & all its JS files too! How To Use Gouge? Download the latest release of Gouge from the releases page. Extract the Gouge zip file to a directory of your...
Microsoft-Analyzer-Suite (Community Edition) : A Deep Dive Into Analyzing Microsoft 365 Security
Explore the capabilities of the Microsoft-Analyzer-Suite (Community Edition), a powerful collection of PowerShell scripts designed to enhance your security analysis. This suite provides automated processing of logs from Microsoft 365 and Microsoft Entra ID, leveraging tools developed by Invictus-IR. Dive into the intricacies of these tools and learn how they can bolster your cybersecurity efforts. A collection of PowerShell scripts...
Cloud_Enum – Advancing Cloud Security Through Multi-Cloud OSINT Tools
I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool myself in a while, but I've done my best to fix bugs...