AeonDave/malskill - Seite 5

networkminer

Auth/lab ref: Network artifact extraction from PCAP files with NetworkMiner.

Quellsprache: Englisch

sleuth-kit

Auth/lab ref: CLI file-system forensics toolkit for analyzing disk images (.dd/.img/.E01/.vmdk).

Quellsprache: Englisch

steghide

Auth/lab ref: steghide JPEG/BMP/WAV/AU hidden-data workflows; embed/extract tests, passphrase handling, challenge evidence.

Quellsprache: Englisch

stegseek

Auth/lab ref: high-speed wordlist attacker for steghide-protected files. For you suspect a JPEG/BMP/WAV/AU artifact contains steghide data but extraction is blocked by a passphrase.

Quellsprache: Englisch

tcpdump

Auth/lab ref: CLI packet capture and BPF filter tool.

Quellsprache: Englisch

tesseract

Auth/lab ref: Tesseract OCR engine for extracting text from images and scanned documents.

Quellsprache: Englisch

yara

Auth/lab ref: YARA pattern matching; files, binaries, memory images, strings/regex/byte rules, malware/stego/IOC classification.

Quellsprache: Englisch

zeek

Auth/lab ref: Protocol-aware network analysis engine that converts raw PCAP or live traffic into structured logs (conn.log, dns.log, http.log, ssl.log, files.log, etc.).

Quellsprache: Englisch

zsteg

Auth/lab ref: zsteg PNG/BMP steganography; LSB, bit-plane, color-channel, hidden-data extraction after metadata/strings checks.

Quellsprache: Englisch

aflplusplus

Auth/lab ref: Coverage-guided fuzzing framework for source and binary targets.

Quellsprache: Englisch

arjun

Auth/lab ref: HTTP parameter discovery fuzzer with a large curated parameter dictionary. For fast testing-surface expansion and easy handoff into ffuf, dalfox, sqlmap, and custom replay pipelines.

Quellsprache: Englisch

boofuzz

Auth/lab ref: Python network protocol fuzzing framework (Sulley successor). For stateful TCP/UDP protocol fuzzing, request-graph modeling, monitor-driven crash detection, and reproducible protocol campaign workflows.

Quellsprache: Englisch

crlfuzz

Auth/lab ref: Specialized web fuzzing tool for CRLF injection and HTTP response splitting detection.

Quellsprache: Englisch

dotdotpwn

Auth/lab ref: directory traversal fuzzer for HTTP, FTP, and TFTP with built-in encoding variants (null byte, URL, double-URL, unicode).

Quellsprache: Englisch

ffuf

Auth/lab ref: High-speed HTTP fuzzing engine for endpoint discovery and input mutation on web/API targets.

Quellsprache: Englisch

honggfuzz

Auth/lab ref: Feedback-driven, high-speed fuzzer with multi-process/thread execution and persistent fuzzing.

Quellsprache: Englisch

jazzer

Auth/lab ref: Coverage-guided in-process fuzzing for JVM (Java/Kotlin/etc), based on libFuzzer concepts.

Quellsprache: Englisch

libfuzzer

Auth/lab ref: In-process, coverage-guided fuzzing engine integrated with Clang/LLVM. For fast unit-level fuzz targets, parser hardening, sanitizer-first bug discovery, and corpus-driven regression loops in C/C++ code.

Quellsprache: Englisch

oss-fuzz

Auth/lab ref: Google-hosted continuous fuzzing service for open-source projects. For long-running, scalable fuzz campaigns, sanitizer-backed triage, and continuous bug reporting with reproducible local workflows.

Quellsprache: Englisch

radamsa

Auth/lab ref: General-purpose mutation engine for generating malformed test inputs.

Quellsprache: Englisch

restler

Auth/lab ref: Stateful REST API fuzzer from OpenAPI specs. For testing complex API dependency chains, producer-consumer request sequencing, and replayable bug-bucket workflows for API reliability/security testing.

Quellsprache: Englisch

schemathesis

Auth/lab ref: OpenAPI/GraphQL property-based API fuzzer. Use to auto-generate API tests, catch schema violations, triage failures systematically, and run high-coverage stateful campaigns in REST/GraphQL services.

Quellsprache: Englisch

wfuzz

Auth/lab ref: Classic web application fuzzer using FUZZ placeholders across URL, headers, forms, auth, and request components.

Quellsprache: Englisch

winafl

Auth/lab ref: Coverage-guided fuzzing framework for Windows binaries. For fuzzing desktop apps, DLL harnesses, or Windows services with DynamoRIO/TinyInst/Intel PT instrumentation and persistent-loop target functions.

Quellsprache: Englisch

linux-exploit-suggester

Auth/lab ref: Suggest Linux privilege escalation exploits based on kernel version and OS.

Quellsprache: Englisch

linux-persistence

Auth/lab ref: Linux durability-risk audit; cron/systemd/SSH/PAM/LD_PRELOAD indicators, validation, cleanup and remediation notes.

Quellsprache: Englisch

mimipenguin

Auth/lab ref: Linux secret-exposure audit; process/memory artifact review for authorized recovery and defensive validation.

Quellsprache: Englisch

pwncat

Auth/lab ref: pwncat-cs Linux session management; listener/connect modes, shell stabilization, module enum, tunnel and cleanup workflow.

Quellsprache: Englisch

ssh-key-scanner

Auth/lab ref: SSH key exposure audit; private keys, authorized_keys, cloud config, host/user access evidence and remediation.

Quellsprache: Englisch

bettercap

Auth/lab ref: Bettercap network lab tooling; Wi-Fi/BLE/HID/Ethernet modules, traffic observation, MITM simulation, auth-exposure checks.

Quellsprache: Englisch

masscan

Auth/lab ref: ultra-fast async TCP SYN port scanner capable of scanning the entire IPv4 internet in minutes.

Quellsprache: Englisch

mitmproxy

Auth/lab ref: interactive TLS-capable HTTP/HTTPS proxy for intercepting, inspecting, modifying, and replaying web traffic.

Quellsprache: Englisch

mosquitto-clients

Auth/lab ref: Mosquitto client tools, primarily `mosquitto_pub` and `mosquitto_sub`, for interacting with MQTT brokers.

Quellsprache: Englisch

mqtt-pwn

Auth/lab ref: MQTT-PWN broker assessment; connect, topics/messages, $SYS fingerprinting, weak-auth checks, IoT evidence workflow.

Quellsprache: Englisch

netcat

Auth/lab ref: Netcat (nc/ncat): TCP/UDP Swiss Army knife for callback-shell lab, bind-shell lab, port checks, banner grabbing, file transfer, port forwarding, and listener setup.

Quellsprache: Englisch

nmap

Auth/lab ref: Network port scanner for host discovery, port scanning, service/version detection, OS fingerprinting, and NSE script execution.

Quellsprache: Englisch

pymodbus

Auth/lab ref: Python library for Modbus TCP and serial communication.

Quellsprache: Englisch

responder

Auth/lab ref: Responder LLMNR/NBT-NS/mDNS assessment; name-resolution exposure, NTLM relay-risk evidence, lab-safe validation.

Quellsprache: Englisch

rustscan

Auth/lab ref: Ultra-fast port scanner that finds open ports in seconds then auto-pipes into nmap for service/version detection.

Quellsprache: Englisch

webhook-site

Auth/lab ref: webhook.site: hosted out-of-band application security testing (OAST) collector - instantly generates a unique HTTPS URL plus DNSHook subdomain that records every HTTP request and DNS query, with a Web UI.

Quellsprache: Englisch