frogy2.0

Orbis - 攻撃対象領域インテリジェンス 全スペクトル攻撃対象領域インテリジェンス Orbis は、組織全体のインターネットに面した攻撃対象領域（サブドメイン、開放ポート、Webアプリケーション、クラウドインフラ、TLS証明書、電子メールのセキュリティ状態、公開されたシークレット、ログインパネルなど）を自動的にマッピングし、発見されたすべての資産をスコアリングおよびランク付けすることで、何に最初に焦点を当てるべきかを正確に把握できます。 機能 ドメインのリストを渡すだけで、残りは自動で実行します。 ドメインのリストを渡すだけで、残りは自動で実行します。 google.com →...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

archerysec

サポート 皆様からの寛大なご寄付が私たちの励みになります。 Paypal: Archery ツールの概要 注意 要件 OpenVAS OWASP Zap Burp Scanner SSLScan Nikto NMAP Vulners インストール Windows インストール 開発者とコントリビューター向けインストールについての注意 手動インストールと自動インストールについての注意 Docker インストール docker compose を使用した ArcherySec の実行 サードパーティ統合の設定 ZAP をデーモンモードで実行 Zap の設定 OpenVAS の設定 ロードマッ...

ACE - Automated, Collection, and Enrichment Platform

The Automated Collection and Enrichment ACE platform is a suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data. The data is collected by running scripts on each computer without installing any software on the target. ACE supports...

UPDATE: OSRFramework 0.17.0 BlackHat Arsenal Version!

PenTestIT RSS Feed Sometime early last month, I made a post about OSRFramework which was version 0.16.8. A new version of this open sources research framework was released at the recently concluded BlackHat 2017 conference. To be precise, it was released on Wednesday, July 26 in the OSINT Arsenal...

Blackhat 2015 Arsenal

Last month at Blackhat Arsenal 2015, Pete and I @willis presented on Serpico. This was our second time at Arsenal. Yet again, awesome people, great venue, and overall a highlight for me of BH/DC/LV. We got some excellent feedback on the project, so thank you to anyone who stopped by. Last year I...

Blackhat 2014 Arsenal Experience

Last week at Blackhat Arsenal 2014, Pete and I @willis presented on Serpico. Arsenal was a great experience and I would highly recommend to anyone as an attendee or presenter. We got some great feedback on the project, so thank you to anyone who stopped by. Here were the top 3 feature requests an...

[Matriux Leandros v3.0 rc1] The pentesting distrib (Now added Blackhat Arsenal 2013 Tools)

Matriux is a Debian-based security distribution designed for penetration testing and forensic investigations. Although it is primarily designed for security enthusiasts and professionals, it can also be used by any Linux user as a desktop system for day-to-day computing. Besides standard Debian...

[Mercury v2.2.0] The Android Assessment Framework

Mercury is a security assessment framework for the Android platform. It allows you to dynamically interact with the Inter-Process Communication IPC endpoints exported by an application installed on a device. Mercury provides similar functionality to a number of static analysis tools, such as aapt...