Category Archives: Pentesting

Mr.SIP – SIP-Based Audit and Attack Tool

Mr.SIP is a tool developed to audit and simulate SIP-based attacks.

Chameleon – Tool for Evading Proxy Categorization

Chameleon is a tool which assists red teams in categorizing their infrastructure under arbitrary categories.

EyeWitness – Intelligence Gathering Tool

EyeWitness is designed to take screenshots of websites, RDP services, and open VNC servers, provide some server header info, and identify default credentials if possible.

Knock – Subdomain Scanner

Knock is a python tool designed to enumerate subdomains on a target domain through a wordlist.

Spray – Password Spraying for Active Directory Credentials

Spray is a tool that you can use to run a bruteforce attack against active directory credentials and services.

Expl-iot – IOT Security Testing and Exploitation Framework

Expl-iot is a framework for security testing IoT and IoT infrastructure. It provides a set of plugins (test cases) and can be extended easily to create new plugins.

Conformer – Password Guessing for different Web Portals

Conformer is a penetration testing tool, mostly used for external assessments to perform password based attacks against common webforms.