If you are looking to explore the world of NSE (Nmap Scripting Language) scripts, this page will hopefully help you find what you are looking for, quickly and effectively. On this page you will find a comprehensive list of all available NSE scripts, organized in an interactive table (spreadsheet) with all the relevant information in […]
In this post, we will be introducing a new minimalistic tool for local privilege escalation attacks in Microsoft Windows systems. The tool is called localbrute.ps1 and it is a simple local Windows account brute force tool written in pure PowerShell. It doesn’t require any 3rd party modules and it is very small in size, which
Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1) Read More »
Introducing another addition to our portfolio of minimalistic tools for pentesting. This time we are going to be looking on a minimalistic TCP and UDP port scanner. Written in pure PowerShell, this small yet powerful port scanner is useful in specific attack simulations where we cannot use any traditional or typical port scanners. Introduction There
Port Scanner in PowerShell (TCP/UDP) Read More »
Introducing another addition to our portfolio of tools designed for restricted environments – a minimalistic SMB brute force attack and password spraying tool SMBLogin.ps1. This compact SMB login attack tool was written in pure PowerShell and it comes handy in specific attack simulations where we cannot use any traditional or typical pentesting tools. Introduction Although
SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1) Read More »
This blog post introduces our newest addition to our pentesting arsenal, the ssh-putty-brute.ps1. This tool can turn the well-known PuTTY SSH client (putty.exe or plink.exe) into a reliable SSH login brute force tool which in addition also evades any Antivirus or endpoint protection solution. Why using PuTTY for SSH brute forcing? There are many great
SSH Brute Force Attack Tool using PuTTY / Plink (ssh-putty-brute.ps1) Read More »
Looking for default passwords during penetration tests is not always fun. It’s actually hard work, especially when we have a large environment. How can we check all those different web interfaces? Is there a viable automation? This article introduces a new and completely free scanner of default password logins (default-http-login-hunter) which can be useful for
Default Password Scanner (default-http-login-hunter.sh) Read More »
What soft skills and technical competencies does it take to became a professional penetration tester or ethical hacker? In this article we will discuss in detail what are the top 25 areas every pentester should be familiar with and what skills you should focus on if you want to become a professional penetration tester. Let’s
Top 25 Penetration Testing Skills and Competencies (Detailed) Read More »
This article introduces adlogin.ps1 – a minimalistic Active Directory login brute force tool written in pure PowerShell. This tiny little tool can be useful in specific attack simulations and scenarios where it is impossible to use any other standard tool from a typical hacker’s toolkit. Why another AD / LDAP brute force attack tool? It’s
Active Directory Brute Force Attack Tool in PowerShell (ADLogin.ps1) Read More »
This page contains a list of PowerShell snippets and cmdlets for penetration testing in pure PowerShell without using any additional modules. These cmdlets are useful in restricted environments where command line utilities such as net.exe, ipconfig.exe, netstat.exe, findstr.exe and others are blocked and our ability to introduce arbitrary code into the environment is limited. Essentials
Pure PowerShell Infosec Cheatsheet Read More »
