PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Our Favorite Pen Testing Tools: 2024 Edition

bishopfox.com | blog | #ai-security | #cloud | #active-directory | #red-team | #bloodhound | #penetration-testing | #security-tools | #impacket
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox's 2024 pentest tool roundup spans networks, cloud, APIs and LLMs: community favorites like Certipy, Freeway, BloodHound and Impacket, with notes on why the team relies on each.
Published
Collected

Related coverage

tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · bishopfox.com
The Pen Testing Tools We’re Thankful for This Season
Bishop Fox consultants name the pen testing tools they're most thankful for in 2019 — TKO-SUBs, BloodHound, Impacket, and Frida among them — with use cases and install notes.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · crowdstrike.com
CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
Falcon Adversary OverWatch now includes 24/7 managed hunting for AI applications and autonomous agent activity, and deeper, telemetry-driven hunting for Google Cloud.
Back