Bento Toolkit
Bento Toolkit is a simple and minimal docker container for penetration testers and CTF players. It has the portability of Docker with the addition of X, so you can also run GUI applications (like Burp) on a remote machine. It includes a range of tools and utilities for web and infrastructure penetration testing and CTF, including Burp Suite, gobuster, SecLists, odat, impacket, sqlmap, sqlplus, mysql-client, openvpn, bytecode-viewer, and ghidra. The toolkit is designed to be lightweight and easy to use, with a focus on simplicity and portability. To use the toolkit, you'll need to have Docker and a Xorg server installed on your machine. You can then use the toolkit to run GUI applications and access a range of tools and utilities for penetration testing and CTF.
FEATURES
ALTERNATIVES
A Live CD and Live USB for penetration testing and security assessment
Full-featured C2 framework for stealthy communication and control on web servers.
GraphSpy is a token management tool that allows users to store and manage access and refresh tokens for multiple users and scopes in one location.
XAHICO Web Platform is a cloud-based solution for vulnerability detection, penetration testing, and adversary simulation, accessible through web browsers and suitable for various user levels.
AEM (Adobe Experience Manager) Hacker is a tool designed to help security researchers and penetration testers identify and exploit vulnerabilities in AEM-based systems.
Generates shellcode that loads Windows payloads from memory and runs them with parameters.
A tool for mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
Python-based toolkit for network hacking with various implemented techniques and supported by Securetia SRL.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.