AeonDave/malskill - Página 7

ropgadget

Auth/lab ref: gadget discovery utility for ELF, PE, Mach-O, and raw binaries.

Idioma del texto original: inglés

seccomp-tools

Auth/lab ref: seccomp BPF inspection toolkit for dumping, disassembling, assembling, and emulating Linux syscall filters.

Idioma del texto original: inglés

strace

Auth/lab ref: Linux syscall tracer for observing file, process, network, memory, and signal behavior at runtime.

Idioma del texto original: inglés

strings

Auth/lab ref: printable-string extractor for binaries, libraries, firmware blobs, and files of unknown type.

Idioma del texto original: inglés

upx

Auth/lab ref: executable packer and unpacker for PE, ELF, Mach-O, and several embedded formats.

Idioma del texto original: inglés

windbg

Auth/lab ref: Microsoft's debugger for user-mode and kernel-mode Windows debugging, crash dump analysis, driver reversing, and rootkit analysis.

Idioma del texto original: inglés

x64dbg

Auth/lab ref: User-mode debugger for Windows x64/x86 with plugin ecosystem for malware analysis, unpacking, API tracing, and anti-anti-debug.

Idioma del texto original: inglés

reverse-ssh

Auth/lab ref: Establish reverse SSH tunnels from victim to attacker for interactive shell access behind NAT/firewall.

Idioma del texto original: inglés

revshellgen

Auth/lab ref: Interactive Python reverse-shell generator with auto listener setup, encoding support, and shell-type selection.

Idioma del texto original: inglés

revshells

Auth/lab ref: callback-shell lab one-liner generator (web UI and CLI) supporting 50+ shells.

Idioma del texto original: inglés

shellerator

Auth/lab ref: CLI reverse/bind-shell lab generator supporting 20+ languages with optional encoding.

Idioma del texto original: inglés

weevely3

Auth/lab ref: Weevely3 PHP web-shell artifact analysis; file ops, module inventory, pivot-risk review, containment and cleanup notes.

Idioma del texto original: inglés

burpsuite

Auth/lab ref: Burp Suite: integrated web application security testing platform with proxy, scanner, intruder, and repeater.

Idioma del texto original: inglés

dalfox

Auth/lab ref: fast Go-based XSS scanner for parameter analysis and DOM-based XSS detection.

Idioma del texto original: inglés

gitleaks

Auth/lab ref: Gitleaks secret scanning; repo/directory/stdin checks, regex+entropy rules, pre-commit/CI evidence, remediation workflow.

Idioma del texto original: inglés

grype

Auth/lab ref: fast vulnerability scanner for container images, filesystems, SBOMs, and directories.

Idioma del texto original: inglés

mythril

Auth/lab ref: symbolic-execution-based security analyzer for Solidity and EVM bytecode.

Idioma del texto original: inglés

nikto

Auth/lab ref: open-source web server scanner checking for 6700+ known vulnerabilities, outdated software, misconfigurations, and dangerous CGI/default files.

Idioma del texto original: inglés

nosqlmap

Auth/lab ref: automated NoSQL injection detection and exploitation tool targeting MongoDB, CouchDB, and other NoSQL databases.

Idioma del texto original: inglés

nuclei

Auth/lab ref: Template-based vulnerability and exposure scanner from ProjectDiscovery.

Idioma del texto original: inglés

openvas

Auth/lab ref: OpenVAS / Greenbone Community Edition: broad network vulnerability scanner checking 90,000+ NVTs across hosts, services, and web apps.

Idioma del texto original: inglés

osv-scanner

Auth/lab ref: Google's dependency vulnerability scanner using the OSV.dev database (30+ ecosystem sources).

Idioma del texto original: inglés

semgrep

Auth/lab ref: fast static analysis tool for finding security vulnerabilities, misconfigurations, and secrets in source code.

Idioma del texto original: inglés

slither

Auth/lab ref: smart contract static analyzer for Solidity and Vyper with detectors, printers, and custom analysis APIs.

Idioma del texto original: inglés

sqlmap

Auth/lab ref: automated SQL injection detection and exploitation tool. For testing web applications for SQLi vulnerabilities to enumerate databases, extract data, read/write files, or escalate to OS shell.

Idioma del texto original: inglés

ssrfmap

Auth/lab ref: automated SSRF (Server-Side Request Forgery) exploitation tool using Burp-style request files.

Idioma del texto original: inglés

sstimap

Auth/lab ref: actively maintained SSTI detection and exploitation tool with interactive and predetermined modes across Jinja2, Twig, Smarty, Freemarker, Velocity, ERB, Pug, Nunjucks, and more.

Idioma del texto original: inglés

testssl

Auth/lab ref: testssl.sh: broad TLS/SSL testing script checking protocol support, cipher suites, vulnerabilities (BEAST, POODLE, Heartbleed, ROBOT, DROWN, etc.), and certificate issues.

Idioma del texto original: inglés

trivy

Auth/lab ref: broad vulnerability scanner for containers, filesystems, repos, IaC, and SBOMs.

Idioma del texto original: inglés

trufflehog

Auth/lab ref: TruffleHog secret scanning; verified secret types, git/cloud/CI sources, validation evidence, remediation workflow.

Idioma del texto original: inglés

wpscan

Auth/lab ref: WordPress vulnerability and enumeration scanner.

Idioma del texto original: Sin determinar

commix

Auth/lab ref: automated OS command injection detection and exploitation tool. For testing web parameters, cookies, or headers for command injection vulnerabilities and escalating to an interactive OS shell.

Idioma del texto original: inglés

corsy

Auth/lab ref: Corsy CORS policy scanner; origin reflection, null origin, wildcard, regex/prefix edge cases, API evidence.

Idioma del texto original: inglés

jwt-tool

Auth/lab ref: broad JWT testing and exploitation toolkit.

Idioma del texto original: inglés

liffy

Auth/lab ref: Liffy LFI/path traversal validation; wrappers, /proc, log artifacts, file-read evidence, WAF-aware replay notes.

Idioma del texto original: inglés

smuggler

Auth/lab ref: HTTP/1.1 request smuggling and desync detection tool testing CL.TE, TE.CL, and TE.TE variants.

Idioma del texto original: inglés

xsstrike

Auth/lab ref: XSStrike XSS validation; context analysis, DOM checks, crawler, blind callback workflow, WAF-aware evidence.

Idioma del texto original: inglés

zap

Auth/lab ref: OWASP ZAP: free open-source web application scanner and intercepting proxy.

Idioma del texto original: inglés

bloodhound

Auth/lab ref: Active Directory testing path visualization using graph theory.

Idioma del texto original: inglés

coercer

Auth/lab ref: Coercer forces Windows servers to authenticate to a controlled host by abusing MS-RPRN, MS-EFSR, MS-DFSNM, and other RPC protocols, enabling NTLM relay or hash capture.

Idioma del texto original: inglés