Boofuzz is a fork of and the successor to the venerable Sulley fuzzing framework. Besides numerous bug fixes, boofuzz aims for extensibility. The goal: fuzz everything. Features: * Easy and quick data generation. * Instrumentation – AKA failure detection. * Target reset after failure. * Recording of test data. * Online documentation. * Support for arbitrary communications mediums. * Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast. * Better recording of test data -- consistent, thorough, clear. * Test result CSV export. * Extensible instrumentation/failure detection. * Much easier install experience! * Far fewer bugs.
FEATURES
ALTERNATIVES
A modular and script-friendly multithread bruteforcer for managing task parameters in Python scripts.
Tool for attacking Active Directory environments through SQL Server access.
A set of YARA rules for identifying files containing sensitive information
PwnAuth is an open-source tool for generating and managing authentication tokens for penetration testing and red teaming exercises.
A customized Kali Linux distribution for ICS/SCADA pentesting professionals
An image with commonly used tools for creating a pentest environment easily and quickly, with detailed instructions for launching in a VPS.
A standard for conducting penetration tests, covering seven main sections from planning to reporting.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.