Posts

Showing posts with the label Pentest

Cloudbunny - A Tool To Capture The Existent Ip Of The Server That Uses A Waf Equally A Proxy Or Protection

Image
CloudBunny is a tool to capture the existent IP of the server that uses a WAF every bit a proxy or protection. How works In this tool nosotros used 3 search engines to search domain information: Shodan, Censys in addition to Zoomeye. To role the tools yous postulate the API Keys, yous tin pick upwards the next links: Shodan - https://account.shodan.io/ Censys - https://censys.io/account/api ZoomEye - https://www.zoomeye.org/profile NOTE : In Zoomeye yous postulate to teach into the login in addition to password, it generates a dynamic api fundamental in addition to I already produce this operate for you. Just teach into your login in addition to password. After that yous postulate to position the credentials inwards the api.conf file. Install the requirements: $ sudo pip install -r requirements.txt Usage By default the tool searches on all search engines (you tin laid this upwards past times arguments), precisely yous postulate to position the credentials every bit sta...

Infection Monkey V1.6 - An Automated Pentest Tool

Image
The Infection Monkey is an opened upward source safety tool for testing a information center's resiliency to perimeter breaches in addition to internal server infection. The Monkey uses diverse methods to self-propagate across a information oculus in addition to reports success to a centralized Monkey Island server. The Infection Monkey is comprised of 2 parts: Monkey - H5N1 tool which infects other machines in addition to propagates to them Monkey Island - H5N1 dedicated server to command in addition to visualize the Infection Monkey's progress within the information center To read to a greater extent than almost the Monkey, see http://infectionmonkey.com Main Features The Infection Monkey uses the next techniques in addition to exploits to propagate to other machines. Multiple propagation techniques: Predefined passwords Common logical exploits Password stealing using Mimikatz Multiple exploit methods: SSH SMB RDP WMI Shellshock Conficker Sam...