Top-rated tools trusted by the cybersecurity community
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go.
Apache-2.0 local, read-only AI server investigation CLI for Linux and Windows hosts. It collects host evidence across auth logs, accounts, processes, network, persistence, services, web logs, Java clues, recent files, packages, containers, and history, then writes evidence.jsonl, commands.log, report.json, and report.md for first-pass incident triage without remediation authority.
Rust port of Dinvoke. DInvoke_rs may be used for many purposes such as PE parsing, dynamic exported functions resolution, dynamically loading PE plugins at runtime, API hooks evasion and more.
Find tools organized by testing methodology and use case
Videos, podcasts, and articles about penetration testing