Punk Security Suite
·124 words·1 min·
0
Table of Contents
Punk Security's Home Page
Overview #
Punk Security publishes a set of open source tools for security testing and training. Each one is on GitHub, with full setup and usage notes.
- SMBeagle: audits SMB file shares. It crawls the shares and lists the files it can read and write, which helps find weak permissions.
- dnsReaper: finds subdomain takeover risks, using over 50 signatures. It can fetch your domains itself or read a list you supply.
- pwnSpoof: generates realistic spoofed web server logs for IIS, Apache and NGINX. It is useful for training and for testing threat hunting in a log tool such as Splunk.
- Secret Magpie: detects secrets such as credentials and keys.
Only use these tools on systems you are authorised to test.