OWASP OWTF Logo

OWASP OWTF

0
Free
Visit Website

OWASP OWTF is a project focused on penetration testing efficiency and alignment of security tests to security standards like the OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST. Pentesters can have more time to see the big picture, think out of the box, find, verify, and combine vulnerabilities, investigate complex vulnerabilities, perform more tactical fuzzing, and demonstrate true impact despite short timeframes. The tool is highly configurable, allowing anyone to create simple plugins or add new tests without development experience. However, understanding and experience are required to correctly interpret tool output and decide what to investigate further.

FEATURES

ALTERNATIVES

An exploration of a new method to abuse DCOM for remote payload execution and lateral movement.

Modular framework for web services penetration testing with support for various attacks.

A tool for mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

A penetration testing framework for identifying and exploiting vulnerabilities.

A C#-based Command and Control Framework for remote access and control of compromised systems.

Sublist3r is a python tool for enumerating subdomains using OSINT and various search engines.

A PoC tool for generating Excel files with embedded macros without using Excel.

A set of commands for exploit developers and reverse-engineers to enhance GDB functionality.