If you are looking for a list of Empire modules, this library might be just for you. On this page you will find a complete list of all Empire modules that are available in the latest version of Empire 4 (BC Security fork), one of the most popular post-exploitation frameworks. Introduction The BC Security Empire […]
Empire Module Library Read More »
On this page you will find a comprehensive list of all Metasploit auxiliary modules that are currently available in the latest Metasploit Framework, the most popular penetration testing platform. I’m hoping that this list will help you navigate through the quantity of Metasploit auxiliary modules more easily and save you time during your penetration testing
Metasploit Auxiliary Modules (Detailed Spreadsheet) Read More »
In this article, we will be looking on Wireshark display filters and see how we could detect various network attacks with them in Wireshark. We will be looking on a number of scenarios typically done by adversaries, e.g. various host discovery techniques, network port scanning methods, various network attacks such as denial of service, poisoning,
Detecting Network Attacks with Wireshark Read More »
If you are looking to explore the world of NSE (Nmap Scripting Language) scripts, this page will hopefully help you find what you are looking for, quickly and effectively. On this page you will find a comprehensive list of all available NSE scripts, organized in an interactive table (spreadsheet) with all the relevant information in
Nmap is probably the most popular network port scanner used by cyber security professionals and penetration testers today. In this blog post we are going to discuss in detail reasons why Nmap requires root (administrative) privileges for most of its functions. Here’s the short explanation of why Nmap needs root privileges: Although Nmap can perform
Why Does Nmap Need Root Privileges? Read More »
This article contains a list of PowerShell commands collected from various corners of the Internet which could be helpful during penetration tests or red team exercises. The list includes various post-exploitation one-liners in pure PowerShell without requiring any offensive (= potentially flagged as malicious) 3rd party modules, but also a bunch of handy administrative commands.
PowerShell Commands for Pentesters Read More »
Introducing another addition to our portfolio of minimalistic tools for pentesting. This time we are going to be looking on a minimalistic TCP and UDP port scanner. Written in pure PowerShell, this small yet powerful port scanner is useful in specific attack simulations where we cannot use any traditional or typical port scanners. Introduction There
Port Scanner in PowerShell (TCP/UDP) Read More »
This page contains a list of PowerShell snippets and cmdlets for penetration testing in pure PowerShell without using any additional modules. These cmdlets are useful in restricted environments where command line utilities such as net.exe, ipconfig.exe, netstat.exe, findstr.exe and others are blocked and our ability to introduce arbitrary code into the environment is limited. Essentials
Pure PowerShell Infosec Cheatsheet Read More »
Port scanning of a website may sound simple, but before firing up the Nmap command on our target, we should do a little digging first. Are we going to scan the right target? In this article we will look closer on how to properly port scan a website. All examples below were produced on Kali
How to Port Scan a Website Read More »
