diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json index f947823..dc97812 100644 --- a/.obsidian/workspace.json +++ b/.obsidian/workspace.json @@ -13,9 +13,9 @@ "state": { "type": "markdown", "state": { - "file": "tools/security/INDEX.md", + "file": "tools/security/vuln-analysis-exploitation/INDEX.md", "mode": "source", - "source": false + "source": true }, "icon": "lucide-file", "title": "INDEX" @@ -94,7 +94,7 @@ "state": { "type": "backlink", "state": { - "file": "tools/security/INDEX.md", + "file": "tools/security/vuln-analysis-exploitation/INDEX.md", "collapseAll": false, "extraContext": false, "sortOrder": "alphabetical", @@ -113,7 +113,7 @@ "state": { "type": "outgoing-link", "state": { - "file": "tools/security/INDEX.md", + "file": "tools/security/vuln-analysis-exploitation/INDEX.md", "linksCollapsed": false, "unlinkedCollapsed": true }, @@ -156,7 +156,7 @@ "state": { "type": "outline", "state": { - "file": "tools/security/INDEX.md", + "file": "tools/security/vuln-analysis-exploitation/INDEX.md", "followCursor": false, "showSearch": false, "searchQuery": "" @@ -196,9 +196,14 @@ }, "active": "903b0393c447bf77", "lastOpenFiles": [ + "tools/security/vuln-analysis-exploitation/vuln-exploit-db.md", + "tools/security/vuln-analysis-exploitation/INDEX.md", + "tools/security/vuln-analysis-exploitation/Packet-crafting-manipulation.md", + "tools/security/vuln-analysis-exploitation/Packet.md", "tools/security/vuln-analysis-exploitation/ssl-tls-web-security.md", - "tools/security/pentest-recon-enum/web-dns-recon-tools.md", + "tools/security/pentest-recon-enum/INDEX.md", "tools/security/INDEX.md", + "tools/security/pentest-recon-enum/web-dns-recon-tools.md", "tools/security/Untitled.md", "tools/sysadmin-devops/system-monitoring-tracing/INDEX.md", "tools/INDEX.md", @@ -217,11 +222,6 @@ "tools/security/pentest-recon-enum/Packet Capture & Analysis.md", "tools/security/pentest-recon-enum/Recon & Threat Reputation.md", "tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md", - "TOOL-TABLE-SCHEMA.md", - "tools/sysadmin-devops/system-monitoring-tracing/Log Analyzers.md", - "tools/sysadmin-devops/https-web-services/security-hardening.md", - "tools/sysadmin-devops/https-web-services/clients-inspectors.md", - "tools/sysadmin-devops/https-web-services/browsers.md", "tools/sysadmin-devops/https-web-services", "documentation/manuals-howtos-guides", "documentation", diff --git a/tools/security/pentest-recon-enum/INDEX.md b/tools/security/pentest-recon-enum/INDEX.md new file mode 100644 index 0000000..619617b --- /dev/null +++ b/tools/security/pentest-recon-enum/INDEX.md @@ -0,0 +1,21 @@ +# Pentest Recon & Enumeration Index + +Core tools and resources for the reconnaissance and enumeration phases of penetration testing: passive/active information gathering, network/host discovery, port scanning, service fingerprinting, packet capture/analysis, OSINT, subdomain enumeration, threat intelligence/reputation checks, and curated pentest arsenals. + +All tool/resource tables in this section **must** follow → [TOOL-TABLE-SCHEMA.md](../../../TOOL-TABLE-SCHEMA.md) + +## Contents + +- **[Packet Capture & Analysis.md](./Packet%20Capture%20%26%20Analysis.md)** — Tools for capturing, dissecting, and analyzing network traffic (Wireshark alternatives, command-line dissectors, tcpdump variants, etc.) +- **[Port Scanners & Network Discovery.md](./Port%20Scanners%20%26%20Network%20Discovery.md)** — High-performance scanners, mass scanners, host discovery utilities (Nmap forks, ZMap, masscan, unicornscan, etc.) +- **[Recon & Threat Reputation.md](./Recon%20%26%20Threat%20Reputation.md)** — OSINT frameworks, subdomain bruteforcers, ASN/BGP lookup, domain/URL reputation APIs, threat intel feeds +- **[pentest-arsenal.md](./pentest-arsenal.md)** — Curated personal/general collection of recon & enumeration tools (growing list of vetted additions) + +## Quick Navigation + +- ↑ [Back to Security Index](../INDEX.md) +- ↑ [Back to Tools Root](../../_INDEX.md) *(update to INDEX.md after eventual rename)* +- ↑ [Back to Repository Root](../../../README.md) +- → [Schema Rules](../../../TOOL-TABLE-SCHEMA.md) +- → [Navigation SOP](../../../SOP-Navigation-and-Layout.md) +- → [Vuln Analysis & Exploitation Index](../vuln-analysis-exploitation/INDEX.md) *(add once created)* \ No newline at end of file diff --git a/tools/security/vuln-analysis-exploitation/INDEX.md b/tools/security/vuln-analysis-exploitation/INDEX.md new file mode 100644 index 0000000..f18a9b5 --- /dev/null +++ b/tools/security/vuln-analysis-exploitation/INDEX.md @@ -0,0 +1,20 @@ +# Vulnerability Analysis & Exploitation Index + +Tools, databases, frameworks, and resources for vulnerability scanning, analysis, exploit development, payload generation, packet crafting/manipulation, exploit databases/search, proof-of-concept code, and post-exploitation tooling. + +All tool/resource tables in this section **must** follow → [TOOL-TABLE-SCHEMA.md](../../../TOOL-TABLE-SCHEMA.md) + +## Contents + +- **[ssl-tls-web-security.md](./ssl-tls-web-security.md)** — Scanners, analyzers, testers, and hardening references for SSL/TLS protocols, certificate validation, web crypto misconfigurations, and related web security issues (may overlap with recon phase — consider moving if duplicated) +- **[Packet Crafting & Manipulation.md](.tools/security/vuln-analysis-exploitation/Packet-crafting-manipulation)** — tools like Scapy, hping3, packETH, etc. for custom packet building, fragmentation, spoofing, and injection +- **[Vulnerability & Exploit Databases](tools/security/vuln-analysis-exploitation/vuln-exploit-db)** — curated links to Exploit-DB, CVE search tools, Vulners, Packet Storm, etc. + +## Quick Navigation + +- ↑ [Back to Security Index](../INDEX.md) +- ↑ [Back to Tools Root](../../_INDEX.md) *(update to INDEX.md after eventual rename of top-level tools/_INDEX.md)* +- ↑ [Back to Repository Root](../../../README.md) +- → [Schema Rules](../../../TOOL-TABLE-SCHEMA.md) +- → [Navigation SOP](../../../SOP-Navigation-and-Layout.md) +- → [Pentest Recon & Enumeration Index](../pentest-recon-enum/INDEX.md) \ No newline at end of file diff --git a/tools/security/vuln-analysis-exploitation/Packet Crafting & Manipulation.md b/tools/security/vuln-analysis-exploitation/Packet Crafting & Manipulation.md deleted file mode 100644 index b2eb5bc..0000000 --- a/tools/security/vuln-analysis-exploitation/Packet Crafting & Manipulation.md +++ /dev/null @@ -1,7 +0,0 @@ -|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit| -|---|---|---|---|---|---| -|hping|[http://www.hping.org/](http://www.hping.org/)|— (source mirrors)|Command-line packet assembler/analyzer for TCP/IP crafting, firewall testing, DoS sim.|[packet-craft, analyzer, cli, c]|Stable (classic)| -|Nemesis|—|[troglobit/nemesis](https://github.com/troglobit/nemesis)|CLI tool to craft and inject custom packets for various protocols.|[packet-craft, injection, cli, c]|Active| -|Scapy|[https://scapy.net/](https://scapy.net/)|— (official repo separate)|Interactive packet manipulation library for forging, sending, decoding packets.|[packet, library, forge, python]|Active| -|packetfu|—|[packetfu/packetfu](https://github.com/packetfu/packetfu)|Mid-level packet manipulation library for Ruby (capture, forge, filter).|[packet, library, ruby]|Older| -|impacket|—|[SecureAuthCorp/impacket](https://github.com/SecureAuthCorp/impacket)|Python classes for low-level network protocol interaction (SMB, Kerberos, etc.).|[protocol, library, smb, python]|Active| \ No newline at end of file diff --git a/tools/security/vuln-analysis-exploitation/Packet-crafting-manipulation.md b/tools/security/vuln-analysis-exploitation/Packet-crafting-manipulation.md new file mode 100644 index 0000000..f8a3ba9 --- /dev/null +++ b/tools/security/vuln-analysis-exploitation/Packet-crafting-manipulation.md @@ -0,0 +1,7 @@ +| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | +| -------- | ---------------------------------------------- | --------------------------------------------------------------------- | -------------------------------------------------------------------------------------- | --------------------------------- | ---------------- | +| hping | [http://www.hping.org/](http://www.hping.org/) | — (source mirrors) | Command-line packet assembler/analyzer for TCP/IP crafting, firewall testing, DoS sim. | [packet-craft, analyzer, cli, c] | Stable (classic) | +| Nemesis | — | [troglobit/nemesis](https://github.com/troglobit/nemesis) | CLI tool to craft and inject custom packets for various protocols. | [packet-craft, injection, cli, c] | Active | +| Scapy | [https://scapy.net/](https://scapy.net/) | — (official repo separate) | Interactive packet manipulation library for forging, sending, decoding packets. | [packet, library, forge, python] | Active | +| packetfu | — | [packetfu/packetfu](https://github.com/packetfu/packetfu) | Mid-level packet manipulation library for Ruby (capture, forge, filter). | [packet, library, ruby] | Older | +| impacket | — | [SecureAuthCorp/impacket](https://github.com/SecureAuthCorp/impacket) | Python classes for low-level network protocol interaction (SMB, Kerberos, etc.). | [protocol, library, smb, python] | Active | \ No newline at end of file diff --git a/tools/security/vuln-analysis-exploitation/Vulnerability & Exploit Databases.md b/tools/security/vuln-analysis-exploitation/vuln-exploit-db.md similarity index 100% rename from tools/security/vuln-analysis-exploitation/Vulnerability & Exploit Databases.md rename to tools/security/vuln-analysis-exploitation/vuln-exploit-db.md