If you are looking for a list of Empire modules, this library might be just for you. On this page you will find a complete list of all Empire modules that are available in the latest version of Empire 4 (BC Security fork), one of the most popular post-exploitation frameworks. Introduction The BC Security Empire […]
Empire Module Library Read More »
On this page you will find a comprehensive list of all CrackMapExec modules that are currently available in the latest public version (5.1.7dev) of CrackMapExec, one of the most capable tools for pentesting internal networks. CrackMapExec (or CME) contains a number of modules which makes this tool so useful. I’m hoping that this list will help you
CrackMapExec Module Library Read More »
In this post, we will be introducing a new minimalistic tool for local privilege escalation attacks in Microsoft Windows systems. The tool is called localbrute.ps1 and it is a simple local Windows account brute force tool written in pure PowerShell. It doesn’t require any 3rd party modules and it is very small in size, which
Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1) Read More »
This article contains a list of PowerShell commands collected from various corners of the Internet which could be helpful during penetration tests or red team exercises. The list includes various post-exploitation one-liners in pure PowerShell without requiring any offensive (= potentially flagged as malicious) 3rd party modules, but also a bunch of handy administrative commands.
PowerShell Commands for Pentesters Read More »
Introducing another addition to our portfolio of minimalistic tools for pentesting. This time we are going to be looking on a minimalistic TCP and UDP port scanner. Written in pure PowerShell, this small yet powerful port scanner is useful in specific attack simulations where we cannot use any traditional or typical port scanners. Introduction There
Port Scanner in PowerShell (TCP/UDP) Read More »
In this part of our RCE series we will be looking closely on the Keimpx tool – one of the first tools designed for pentesting of large Windows networks. This is the 4th part of the blog post series focused on tools for performing remote command execution (RCE) on Windows machines from Linux (Kali). Introduction
RCE on Windows from Linux Part 4: Keimpx Read More »
Introducing another addition to our portfolio of tools designed for restricted environments – a minimalistic SMB brute force attack and password spraying tool SMBLogin.ps1. This compact SMB login attack tool was written in pure PowerShell and it comes handy in specific attack simulations where we cannot use any traditional or typical pentesting tools. Introduction Although
SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1) Read More »
This blog post introduces our newest addition to our pentesting arsenal, the ssh-putty-brute.ps1. This tool can turn the well-known PuTTY SSH client (putty.exe or plink.exe) into a reliable SSH login brute force tool which in addition also evades any Antivirus or endpoint protection solution. Why using PuTTY for SSH brute forcing? There are many great
SSH Brute Force Attack Tool using PuTTY / Plink (ssh-putty-brute.ps1) Read More »
As information security professionals, we have to deal with potentially dangerous files practically on daily basis. We run various scripts, PoC code, exploits and other things and we put trust in the utilities that read those files. Can we really trust them? In this article we will have a peak into the world of ANSI/VT
Terminal Escape Injection Read More »
This article introduces adlogin.ps1 – a minimalistic Active Directory login brute force tool written in pure PowerShell. This tiny little tool can be useful in specific attack simulations and scenarios where it is impossible to use any other standard tool from a typical hacker’s toolkit. Why another AD / LDAP brute force attack tool? It’s
Active Directory Brute Force Attack Tool in PowerShell (ADLogin.ps1) Read More »
