Fast-Track

Featured on “Back|Track Version 3”, this tool combines multiple attacks and gives a menu driven automation to pentesting. “Fast-Track” automates several different types of attacks including Metasploit’s “AutoPwn” and MSSQL brute forcing as well as updates for the “Back|Track” suite.

Video Preview!
Free Download!

SA Exploiter

SA Exploiter is the most advanced GUI SQL injection tool available.  Whether it is copy/paste of metasploit shellcode or using your own custom exe, SA Exploiter's binary payload delivery method is not constrained by Windows debug to 64k like many other tools.  It automates many other exploitation tasks and is designed for windows.

Video Preview!
Free Download!

Utilman.py

Quick script written specifically for a local Windows Vista attack. Reboot in a Linux distribution like Back|Track and run this script on a Vista machine. Utilman.py will auto detect NTFS partitions, mount as read/write, identify Utilman.exe, rename it to Utilman.exe.bak, and copy cmd.exe as Utilman.exe. When you reboot back into Windows Vista, press the Windows Button and U together and the Utilman.exe will launch a command prompt. From there you have a full command shell as SYSTEM level rights. Run explorer.exe to get a start menu..All without entering credentials.

Free Download!

Quickbrute.py

During a pentest, we found that most smb brute forcers don’t work against Windows Server 2003 R2, to fix this we wrote quickbrute in order to get brute forcing working on smb. Quickbrute is an smb brute forcer and requires a username and password list, upon successful compromise of user accounts, quickbrute will report on them as well as identify if the account has administrative level privileges.

Free Download!

Payloadgen.py

PayloadGen is a simple Metasploit Payload Generator that simplifies the msfpayload/msfcli functionality in metasploit. PayloadGen is an interactive menu driven tool that will help you create a metasploit payload, and execute a listener, all extremely simplistic. Additionally, there are options in specifying payload encoding to help get past those pesky anti-virus vendors.

Tested on: Ubuntu and Back|Track 3

Free Download!

WPABrute.py

WPA brute automates the WPA cracking process and uses an interactive menu driven style to help aid in automating aireplay and aircrack attacks for the EAPOL handshakes. Once ran, WPABrute will deauthenticate associated users, wait for the handshake, and automatically run aircrack in order to crack the accounts.

Requirements: Aircrack-NG
Tested on: Ubuntu and BackTrack 3

Free Download!

*These tools are available to penetration testers only.  Anyone caught using these tools for illegal activities will be prosecuted to the fullest extent of the law*