Pentoo is a Live CD and Live USB designed for penetration testing and security assessment. Based off Gentoo Linux, Pentoo is provided both as 32 and 64 bit installable livecd. Our chat services are linked, although discord is considered "main". Join us on discord for support: https://discord.gg/5yhY9bg Or on irc on https://libera.chat/ #pentoo Or on telegram https://t.me/pentoo Report bugs on github: https://github.com/pentoo/pentoo-overlay/issues
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Python Exploit Development Assistance for GDB with enhanced debugging features and commands for exploit development.
An open-source penetration testing framework for social engineering with custom attack vectors.
Full-featured C2 framework for stealthy communication and control on web servers.
A blog post discussing the often overlooked dangers of CSV injection in applications.
A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing.
A collection of scripts for Turbo Intruder, a penetration testing tool
A Python script that scans file systems to identify hardcoded credentials, API keys, and other sensitive secrets using configurable regex patterns.
A next generation version of enum4linux with enhanced features for enumerating information from Windows and Samba systems.
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.