7 Minute Security Wiki

baddns is a security tool designed to check subdomains for subdomain takeovers and other DNS misconfigurations ('DNS tomfoolery').

FOCA is a tool used to find metadata and hidden information within documents, typically utilized for OSINT (Open Source Intelligence) and penetration testing.

bloodyAD is a tool designed for automating Active Directory tasks, including user management, password changes, and privilege escalation.

pxethiefy is a security tool designed to enumerate PXE boot media provided by an SCCM server within a target network. It works by broadcasting for PXE servers, requesting the offered boot media, and attempting to decrypt it.

OpenClaw is a self-hosted, open-source AI agent gateway that runs on macOS (specifically tested on Mac Mini M4). It allows users to interact with an AI assistant via Telegram that can perform real-world actions such as browsing the web, running terminal commands, managing files, reading emails, and checking calendars.

DISM is a Windows utility used to enumerate, install, uninstall, configure, and update features and packages within Windows images. The available commands vary based on whether the image being serviced is offline or currently running.

Impacket is a collection of Python classes designed for working with network protocols, providing low-level programmatic access to packets and full protocol implementations for SMB1-3 and MSRPC. It allows developers to construct packets from scratch or parse them from raw data using an object-oriented API.

Windows Local Administrator Password Solution (LAPS) is a feature that automatically manages and backs up the password of a local administrator account on Microsoft Entra joined or Windows Server Active Directory-joined devices. It can also be used to manage and back up the Directory Services Restore Mode (DSRM) account password on Windows Server Active Directory domain controllers.

PowerHuntShares is an open-source PowerShell tool used by cybersecurity teams and penetration testers to identify, analyze, and remediate SMB shares within Active Directory environments. It is designed to create a comprehensive share inventory to help assess risks and prioritize remediation.

pretender is a tool designed to obtain machine-in-the-middle (MITM) positions by combining the techniques of mitm6 with the name resolution spoofing capabilities of Responder.

NamicSoft is a Windows-based software package designed to aggregate vulnerability scans from multiple sources—including Nessus, Burp, Nexpose, and nmap—and transform them into digestible reports.