Security Blog — Pentest Scripts
Cybersecurity research, vulnerability analysis, and practical security insights.
Pivoting and Port Forwarding Using Metasploit
The main purpose of port forwarding while performing a penetration test is to help us reach a specific port on a system that doesn’t exist on the same network.In order to understand this better...
Create Your Own Web Penetration Testing Lab in Kali Linux
Web applications have become common targets for attackers. Attackers can leverage relatively simple vulnerabilities to gain access to confidential information most likely containing personally...
Hack Facebook Credentials Using BeEF
For those of you who don’t know, BeEF (the browser exploitation framework) is a tool that cleverly uses the browser’s built in functionality, javascript and other third party software...
Bypass UAC and Get Admin Privilege in Windows 7 Using Metasploit
Sometimes when you trying to exploit a security hole and success gain an access to the target system, usually you only act as logged user and it’s not a local system account. In this tips and trick...
Integrating Metasploit with Browser Exploitation Framework
last post we getting started with BeEF of how to insert a Javascript link in a page and compromised a client browsers. So the Browser Exploitation Exploitation Framework (BeEF) has some awesome...
Evade Windows Firewall by SSH Tunneling Using Metasploit
A lot of times the victim machine may have windows firewall turned on thus making exploitation of vulnerable services on the victim tough. In this tutorial, we will look at how to workaround this...
Exploit Heartbleed OpenSSL Vulnerability Using Kali Linux
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS...
Evading Antivirus Using Veil-Framework in Kali Linux
Veil is a Python program that attempts to automate the creation of AV-evading payloads in a new framework. Veil-Evasion is a tool to generate payload executables that bypass common antivirus...
Brute Force SMB Shares in Windows 7 Using Metasploit
An attacker will take the path of least resistance in order to gain access to critical systems and data. During a penetration test we’ll take the same tactic as well. Frequently this is...
Getting Started with Browser Exploitation Framework (BeEF) in Kali Linux
BeEF is short for The Browser Exploitation Framework. it’s a testing tool designed to enable penetration testers to launch client-side attacks against target browsers. By using techniques...
Hack Windows 7 with Metasploit Using Kali Linux
Today i am gonna show how to exploit any windows OS using metasploit. Exploiting a windows vulnerability to logging into the system with out username and password using Metasploit. Before...
Crack and Reset the System Password Locally Using Kali Linux
Hi folks, For today post i will show you how to crack and reset password at times when you forget it or when you want to gain access to a computer for which you do not know the password. there are...
Directory Brute Forcing Using Curl and WC
Directory Brute Forcing with common tools: Finding non-linked resources is an important part of any assessment. If you’re working with a scope that limits tools you can install/use, or you want...
Checking For Ssl Vulnerabilities On The Command Line
While Nessus is a wonderful vulnerability scanner, sometimes it is too slow and resource heavy for individual issues. The following 2 equivalent scripts perform checks for the following SSL related...
String Encoding in the Shell for Obfuscation
Data encoding in the shell is a quick and reliable method to parse input in one type of format to format of another type. This could be done in order to determine how an application has converted...
Bash Web Requester
Bash Web RequesterScan URLs for a list of given regexps #!/usr/bin/env bash ################################################################ # Bash Web Requester # by Aung Khant,...
Bash Web Parameter Fuzzer
PenTester Scripting [[exploitation:bash_web_parameter_fuzzer]] You are here: start » exploitation...
SSL Tests - v2, weak ciphers, MD5, Renegotiation
SSL Tests - v2, weak ciphers, MD5, Renegotiation #!/usr/bin/env bash # Description: # Script to extract the most security relevant details from a # target SSL/TLS implementation by...