praetorian-inc

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

A static analysis tool for securing Go code

Password cracking rules for Hashcat based on statistics and industry patterns

TCP Port Redirection Utility

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Standalone utility for service discovery on open ports!

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

The Damn Vulnerable Router Firmware Project

Python and Powershell internal penetration testing framework

A tool to transform Chromium browsers into a C2 Implant

A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom.

Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.

LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary

A Go implementation of Cobalt Strike style BOF/COFF loaders.

A transparent proxy that can modify and drop traffic for arbitrary TCP connections.

Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds

PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.

A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN

An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS

Automated Responder/secretsdump.py cracking

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

a tool to audit the istio service mesh

a tool to make it easy and fast to test various forms of injection

A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.

automated password spraying tool

API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs

WasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registries.

A Proof of Concept Rootkit Demonstrating Keylogging and Virtual File System (VFS) Capabilities

API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven templates

radare, angr, pwndbg, binjitsu, ect in a box ready for pwning

Open-source cloud security reconnaissance framework

Caeruleus is a Bluetooth Low Energy testing toolkit for Linux/BlueZ, implemented as a single Go binary. It covers the full interaction-to-assessment lifecycle

Interactive results explorer and annotation tool for Nosey Parker

Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.