Tool Archives - InfosecMatter

CMS Vulnerability Scanners for WordPress, Joomla, Drupal, Moodle, Typo3..

Leave a Comment / Penetration Testing, Tools and Utilities, Vulnerability Assessment

In this article we will look on 12 free and open-source vulnerability scanners for CMS (Content Management System) such as WordPress, Joomla, Drupal, Moodle, Typo3 and similar publishing platforms. We will look on Droopescan, CMSmap, CMSeeK, WPXF, WPScan, WPSeku, WPForce, JoomScan, JoomlaVS, JScanner, Drupwn, Typo3Scan vulnerability scanners that were developed specifically to find vulnerabilities in […]

CMS Vulnerability Scanners for WordPress, Joomla, Drupal, Moodle, Typo3.. Read More »

Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1)

Leave a Comment / Penetration Testing, Tools and Utilities

In this post, we will be introducing a new minimalistic tool for local privilege escalation attacks in Microsoft Windows systems. The tool is called localbrute.ps1 and it is a simple local Windows account brute force tool written in pure PowerShell. It doesn’t require any 3rd party modules and it is very small in size, which

Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1) Read More »

Port Scanner in PowerShell (TCP/UDP)

Leave a Comment / Network Security, Penetration Testing, Tools and Utilities

Introducing another addition to our portfolio of minimalistic tools for pentesting. This time we are going to be looking on a minimalistic TCP and UDP port scanner. Written in pure PowerShell, this small yet powerful port scanner is useful in specific attack simulations where we cannot use any traditional or typical port scanners. Introduction There

Port Scanner in PowerShell (TCP/UDP) Read More »

SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1)

Leave a Comment / Penetration Testing, Tools and Utilities

Introducing another addition to our portfolio of tools designed for restricted environments – a minimalistic SMB brute force attack and password spraying tool SMBLogin.ps1. This compact SMB login attack tool was written in pure PowerShell and it comes handy in specific attack simulations where we cannot use any traditional or typical pentesting tools. Introduction Although

SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1) Read More »

SSH Brute Force Attack Tool using PuTTY / Plink (ssh-putty-brute.ps1)

2 Comments / Penetration Testing, Tools and Utilities

This blog post introduces our newest addition to our pentesting arsenal, the ssh-putty-brute.ps1. This tool can turn the well-known PuTTY SSH client (putty.exe or plink.exe) into a reliable SSH login brute force tool which in addition also evades any Antivirus or endpoint protection solution. Why using PuTTY for SSH brute forcing? There are many great

SSH Brute Force Attack Tool using PuTTY / Plink (ssh-putty-brute.ps1) Read More »

Default Password Scanner (default-http-login-hunter.sh)

Leave a Comment / Penetration Testing, Tools and Utilities, Vulnerability Assessment

Looking for default passwords during penetration tests is not always fun. It’s actually hard work, especially when we have a large environment. How can we check all those different web interfaces? Is there a viable automation? This article introduces a new and completely free scanner of default password logins (default-http-login-hunter) which can be useful for

Default Password Scanner (default-http-login-hunter.sh) Read More »

Nessus CSV Parser and Extractor

Leave a Comment / Tools and Utilities, Vulnerability Assessment

Introducing yanp.sh – Yet Another Nessus Parser! This small tool provides quick and easy way of extracting vital information from Nessus scan results. It can parse multiple results in one go and in the end create a consolidated report from all results combined. This tool helps us speed up the reporting phase, but not only

Nessus CSV Parser and Extractor Read More »

Active Directory Brute Force Attack Tool in PowerShell (ADLogin.ps1)

Leave a Comment / Penetration Testing, Tools and Utilities

Adlogin - minimalistic Active Directory login attack tool

This article introduces adlogin.ps1 – a minimalistic Active Directory login brute force tool written in pure PowerShell. This tiny little tool can be useful in specific attack simulations and scenarios where it is impossible to use any other standard tool from a typical hacker’s toolkit. Why another AD / LDAP brute force attack tool? It’s

Active Directory Brute Force Attack Tool in PowerShell (ADLogin.ps1) Read More »