On this page you will find a comprehensive list of all Metasploit auxiliary modules that are currently available in the latest Metasploit Framework, the most popular penetration testing platform. I’m hoping that this list will help you navigate through the quantity of Metasploit auxiliary modules more easily and save you time during your penetration testing […]
Metasploit Auxiliary Modules (Detailed Spreadsheet) Read More »
In this post, we will be introducing a new minimalistic tool for local privilege escalation attacks in Microsoft Windows systems. The tool is called localbrute.ps1 and it is a simple local Windows account brute force tool written in pure PowerShell. It doesn’t require any 3rd party modules and it is very small in size, which
Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1) Read More »
This is a quick howto post that can help not only penetration testers, but also network engineers, administrators and other specialists who work with network equipment, old storages, embedded systems, kiosk devices, and variety of other legacy systems with SSH interface (tcp/22). We are going talk about SSH compatibility issues and those pesky SSH unable
Solution for SSH Unable to Negotiate Errors Read More »
Introducing another addition to our portfolio of tools designed for restricted environments – a minimalistic SMB brute force attack and password spraying tool SMBLogin.ps1. This compact SMB login attack tool was written in pure PowerShell and it comes handy in specific attack simulations where we cannot use any traditional or typical pentesting tools. Introduction Although
SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1) Read More »
This blog post introduces our newest addition to our pentesting arsenal, the ssh-putty-brute.ps1. This tool can turn the well-known PuTTY SSH client (putty.exe or plink.exe) into a reliable SSH login brute force tool which in addition also evades any Antivirus or endpoint protection solution. Why using PuTTY for SSH brute forcing? There are many great
SSH Brute Force Attack Tool using PuTTY / Plink (ssh-putty-brute.ps1) Read More »
This article introduces adlogin.ps1 – a minimalistic Active Directory login brute force tool written in pure PowerShell. This tiny little tool can be useful in specific attack simulations and scenarios where it is impossible to use any other standard tool from a typical hacker’s toolkit. Why another AD / LDAP brute force attack tool? It’s
Active Directory Brute Force Attack Tool in PowerShell (ADLogin.ps1) Read More »
During penetration tests, we sometimes encounter a Firebird database installation running on the network. It typically runs on port tcp/3050 and often times it is configured with default credentials SYSDBA/masterkey. What can we do with this? Can we get a shell? In this article, we will explore our options. Introduction For those who are completely
Firebird Database Exploitation Read More »
In this article we will look on how to install Nessus vulnerability scanner into a Docker container on a typical Kali Linux installation. We will also cover how to integrate Nessus with Hydra in order to give Nessus login brute forcing capabilities. As the first step we have to make sure that we have Docker
Install Nessus in Docker Read More »
