Utilities, Scripts and Payloads
Introduction
This section contains different utilities to help you during the penetration testing process
Useful External Resources
- CyberChef: https://gchq.github.io/CyberChef/
- Python exploit development library: https://github.com/Gallopsled/pwntools
Pages
- Shells and Payloads A shell is only useful if it is stable, interactive, and reachable. A raw nc catch that dies on Ctrl+C, cannot run sudo because there is no TTY, or …
- Metasploit Framework The Metasploit Framework is a Ruby-based penetration testing platform for writing, testing, and executing exploit code. It contains a suite of tools …
- File Transfers Moving a tool onto a target and pulling loot off it is a prerequisite for almost every other phase. This file covers transfers in both directions, on …
- Pivoting, Tunneling, Port Forwarding Pivoting is moving to other networks through a compromised host (the pivot) to reach targets on different segments. Its primary use is defeating …
- Password Attacks Password attacks fail for three reasons: attacking the wrong hash type, locking out accounts by spraying carelessly, or missing credentials that are …