A tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) for offensive security purposes.
#penetration-testing tools
236 results · page 5
A proof-of-concept obfuscation toolkit for C# post-exploitation tools, designed to conceal malicious activities from detection.
iOS Reverse Engineering Toolkit for automating common tasks in iOS penetration testing.
Ivy is a payload creation framework for executing arbitrary VBA source code directly in memory, utilizing programmatical access to load, decrypt, and execute shellcode.
Kali Linux is a specialized Linux distribution for cybersecurity professionals, focusing on penetration testing and security auditing.
KFSensor is an advanced Windows honeypot system for detecting hackers and worms by simulating vulnerable system services.
LaBrea is a 'sticky' honeypot and IDS tool that traps malicious actors by creating virtual servers on unused IP addresses.
A series of vulnerable virtual machine images with documentation to teach Linux, Apache, PHP, MySQL security.
An open source network penetration testing framework with automatic recon and scanning capabilities.
A simple snippet to increment ../ on the URL.
An OSINT tool that generates username lists for companies on LinkedIn for social engineering attacks or security testing purposes.
A speedy, parallel, and modular login brute-forcing tool designed for network services. It's free and open-source software that supports various protocols like HTTP, FTP, SSH, and more.
A bash script for scanning a target network for HTTP resources through XXE
A penetration testing framework for identifying and exploiting vulnerabilities.
A comprehensive guide to using Metasploit, including searching for modules, specifying exploits and payloads, and using auxiliary modules.
A powerful penetration testing platform for identifying vulnerabilities and weaknesses in computer systems.
Free online ethical hacking course covering penetration testing, web app assessments, exploit development, and security operations.
A PowerShell toolkit for attacking Azure environments
Modlishka is a reverse proxy tool for intercepting and manipulating HTTP traffic, ideal for penetration testers, security researchers, and developers to analyze and test web applications.
Mortar is an evasion technique to defeat and divert detection and prevention of security products, including AV, EDR, and XDR solutions.
A tool for interacting with the MSBuild API, enabling malicious activities and evading detection.
mXtract is a Linux-based tool for memory analysis and dumping with regex pattern search capabilities.
A macOS Initial Access Payload Generator for penetration testing and red teaming exercises.
A collaborative, multi-platform, red teaming framework for simulating attacks and testing defenses.
Load more tools
Showing 120 of 236