PenTestIT.com

Your source for Detection Engineering, Security Research and Adversary Simulation

You are here: Home / Archives for Penetration Testing

Penetration Testing Archives:

Offensive Security

Finding crown jewels in Nmap scans with Jev!

This post details a tool I wrote to use the Jev detection model and create attack paths from nmap scans.

Posted: by Leave a Comment

Continuing my decision model journey with Jev. We know that an Nmap scan tells you what ports are open. It does not tell you which of these hosts matter. You may find a vCenter console, a Jenkins server, and the company blog can all look the same from the outside: TCP 443 or 8443, a TLS certificate, a web page. Typical attack path tools need a distinction before they can do Read more about Finding crown jewels in Nmap scans with Jev!

Offensive Security

List of Open Source C2 Post-Exploitation Frameworks

This is a list of open source C2 post-exploitation frameworks.

Posted: by 1,428 views
Updated:

Restoring this post with the help of the Wayback machine - This post has been lying in my drafts for more than a year with edits all over. But two days ago, it was announced that Powershell Empire would no longer be supported by it’s authors. Hence just like I curated a list of adversary emulation tools, I finalized this list of open source C2 post-exploitation Read more about List of Open Source C2 Post-Exploitation Frameworks