Browsing Tag
hacker
164 posts
pdf-parser: A tool for parsing and analyzing PDF files to extract data or metadata
Once PDFiD flags a suspicious PDF (as I covered in that article), pdf-parser is the tool I turn…
guymager: A forensic imaging tool for creating disk images and performing hash verification
Every forensic investigation starts with acquisition, and getting that step wrong ruins everything downstream. Guymager is the tool…
Scrounge-NTFS: A Comprehensive Guide to Recovering Data from Damaged NTFS Volumes
When I get a Windows drive with a corrupted or partially destroyed NTFS file system — a failed…
scalpel: A file carving tool for recovering files from disk images
Scalpel is a fast, high-performance, open-source file carving tool that reads a set of file-type header/footer definitions from…
magicrescue: A tool for recovering files from damaged filesystems
Magicrescue is another file-carving tool in my recovery kit, and while it overlaps conceptually with Scalpel, it has…
evil-winrm: A PowerShell-based remote management tool for exploiting Windows systems
Evil-WinRM is a Ruby-based tool built for penetration testers to interact with Windows Remote Management (WinRM), a management…
weeevely: A web shell for maintaining access and performing post-exploitation activities
Weevely is a tool I’ve used specifically during authorized web application penetration tests, in the post-exploitation phase after…
laudanum: A covert channel tool for encrypting and tunneling data over a network
Laudanum is a collection I keep bookmarked for a very specific stage of an authorized web application penetration…
udptunnel: A tool for tunneling UDP traffic through a firewall
I’ve run into plenty of authorized engagements and lab setups where a firewall only allows outbound TCP, but…
stunnel4: A tool for creating secure SSL/TLS tunnels to protect unencrypted services
Stunnel is one of those tools I consider quietly essential — it takes any plain, unencrypted TCP-based service…