Ransomware Encryption Analysis Tool
Forensic tool for analyzing ransomware encryption schemes: identify algorithm, mode, key derivation, and find weaknesses.
Arsenal
Professional offensive security tools & exploit frameworks
120
Tools
12
Categories
Blockchain Transaction Tracer
Blockchain transaction analysis tool: trace fund flow in Bitcoin/Ethereum, identify mixers and exchanges.
AWS IAM Privilege Escalation Scanner
Python script that analyzes AWS IAM policies and detects privilege escalation paths: AssumeRole chains, policy misconfigs, wildcard permissions.
Kubernetes RBAC Auditor
Tool that audits Kubernetes RBAC configurations: detects overprivileged roles, service accounts with mounted secrets, pod security violations.
Azure AD Password Sprayer
Password spraying tool against Azure AD/Entra ID with smart lockout evasion: IP rotation, intelligent timing, MFA detection.
Docker Container Escape Exploits
Collection of 6 Docker container escape techniques with working exploits: docker.sock, privileged mode, cap_sys_admin, cgroups.
Terraform Security Scanner
Static analyzer for Terraform configurations: detects open security groups, public buckets, disabled encryption, IAM misconfigs.
Cloud Metadata SSRF Exploiter
Tool for exploiting SSRF against cloud metadata services: AWS IMDSv1/v2, GCP, Azure, DigitalOcean. Extracts temporary credentials.
S3 Bucket Enumeration & Pillage
Scanner for public and misconfigured S3 buckets: wordlist enumeration, permission detection, selective download of sensitive content.
GCP Service Account Key Finder
Script that searches for GCP service account keys in repositories, buckets, and compromised filesystems. Validates and enumerates permissions.
CI/CD Pipeline Poisoning Kit
Techniques and scripts for compromising CI/CD pipelines: GitHub Actions injection, GitLab CI secrets extraction, Jenkins credential theft.
Cloud Firewall Rule Analyzer
Cloud firewall/security group rule analyzer for AWS, Azure, and GCP: detects permissive rules, unnecessary ports, generates hardening report.