AeonDave/malskill - Page 7

ropgadget

Auth/lab ref: gadget discovery utility for ELF, PE, Mach-O, and raw binaries.

seccomp-tools

Auth/lab ref: seccomp BPF inspection toolkit for dumping, disassembling, assembling, and emulating Linux syscall filters.

strace

Auth/lab ref: Linux syscall tracer for observing file, process, network, memory, and signal behavior at runtime.

strings

Auth/lab ref: printable-string extractor for binaries, libraries, firmware blobs, and files of unknown type.

upx

Auth/lab ref: executable packer and unpacker for PE, ELF, Mach-O, and several embedded formats.

windbg

Auth/lab ref: Microsoft's debugger for user-mode and kernel-mode Windows debugging, crash dump analysis, driver reversing, and rootkit analysis.

x64dbg

Auth/lab ref: User-mode debugger for Windows x64/x86 with plugin ecosystem for malware analysis, unpacking, API tracing, and anti-anti-debug.

reverse-ssh

Auth/lab ref: Establish reverse SSH tunnels from victim to attacker for interactive shell access behind NAT/firewall.

revshellgen

Auth/lab ref: Interactive Python reverse-shell generator with auto listener setup, encoding support, and shell-type selection.

revshells

Auth/lab ref: callback-shell lab one-liner generator (web UI and CLI) supporting 50+ shells.

shellerator

Auth/lab ref: CLI reverse/bind-shell lab generator supporting 20+ languages with optional encoding.

weevely3

Auth/lab ref: Weevely3 PHP web-shell artifact analysis; file ops, module inventory, pivot-risk review, containment and cleanup notes.

burpsuite

Auth/lab ref: Burp Suite: integrated web application security testing platform with proxy, scanner, intruder, and repeater.

dalfox

Auth/lab ref: fast Go-based XSS scanner for parameter analysis and DOM-based XSS detection.

gitleaks

Auth/lab ref: Gitleaks secret scanning; repo/directory/stdin checks, regex+entropy rules, pre-commit/CI evidence, remediation workflow.

grype

Auth/lab ref: fast vulnerability scanner for container images, filesystems, SBOMs, and directories.

mythril

Auth/lab ref: symbolic-execution-based security analyzer for Solidity and EVM bytecode.

nikto

Auth/lab ref: open-source web server scanner checking for 6700+ known vulnerabilities, outdated software, misconfigurations, and dangerous CGI/default files.

nosqlmap

Auth/lab ref: automated NoSQL injection detection and exploitation tool targeting MongoDB, CouchDB, and other NoSQL databases.

nuclei

Auth/lab ref: Template-based vulnerability and exposure scanner from ProjectDiscovery.

openvas

Auth/lab ref: OpenVAS / Greenbone Community Edition: broad network vulnerability scanner checking 90,000+ NVTs across hosts, services, and web apps.

osv-scanner

Auth/lab ref: Google's dependency vulnerability scanner using the OSV.dev database (30+ ecosystem sources).

semgrep

Auth/lab ref: fast static analysis tool for finding security vulnerabilities, misconfigurations, and secrets in source code.

slither

Auth/lab ref: smart contract static analyzer for Solidity and Vyper with detectors, printers, and custom analysis APIs.

sqlmap

Auth/lab ref: automated SQL injection detection and exploitation tool. For testing web applications for SQLi vulnerabilities to enumerate databases, extract data, read/write files, or escalate to OS shell.

ssrfmap

Auth/lab ref: automated SSRF (Server-Side Request Forgery) exploitation tool using Burp-style request files.

sstimap

Auth/lab ref: actively maintained SSTI detection and exploitation tool with interactive and predetermined modes across Jinja2, Twig, Smarty, Freemarker, Velocity, ERB, Pug, Nunjucks, and more.

testssl

Auth/lab ref: testssl.sh: broad TLS/SSL testing script checking protocol support, cipher suites, vulnerabilities (BEAST, POODLE, Heartbleed, ROBOT, DROWN, etc.), and certificate issues.

trivy

Auth/lab ref: broad vulnerability scanner for containers, filesystems, repos, IaC, and SBOMs.

trufflehog

Auth/lab ref: TruffleHog secret scanning; verified secret types, git/cloud/CI sources, validation evidence, remediation workflow.

wpscan

Auth/lab ref: WordPress vulnerability and enumeration scanner.

Source text: Undetermined

commix

Auth/lab ref: automated OS command injection detection and exploitation tool. For testing web parameters, cookies, or headers for command injection vulnerabilities and escalating to an interactive OS shell.

corsy

Auth/lab ref: Corsy CORS policy scanner; origin reflection, null origin, wildcard, regex/prefix edge cases, API evidence.

jwt-tool

Auth/lab ref: broad JWT testing and exploitation toolkit.

liffy

Auth/lab ref: Liffy LFI/path traversal validation; wrappers, /proc, log artifacts, file-read evidence, WAF-aware replay notes.

smuggler

Auth/lab ref: HTTP/1.1 request smuggling and desync detection tool testing CL.TE, TE.CL, and TE.TE variants.

xsstrike

Auth/lab ref: XSStrike XSS validation; context analysis, DOM checks, crawler, blind callback workflow, WAF-aware evidence.

zap

Auth/lab ref: OWASP ZAP: free open-source web application scanner and intercepting proxy.

bloodhound

Auth/lab ref: Active Directory testing path visualization using graph theory.

coercer

Auth/lab ref: Coercer forces Windows servers to authenticate to a controlled host by abusing MS-RPRN, MS-EFSR, MS-DFSNM, and other RPC protocols, enabling NTLM relay or hash capture.