Skip to content

Add NetExec, Certipy, Caido, and Censys tools#60

Open
fauzan171 wants to merge 2 commits into
infosecn1nja:masterfrom
fauzan171:add-security-tools
Open

Add NetExec, Certipy, Caido, and Censys tools#60
fauzan171 wants to merge 2 commits into
infosecn1nja:masterfrom
fauzan171:add-security-tools

Conversation

@fauzan171
Copy link
Copy Markdown

Description

Added 4 new cutting-edge security tools to the toolkit:

Reconnaissance:

  1. Caido - A lightweight, modern web security auditing toolkit and proxy. Next-generation alternative to Burp Suite with AI-powered features for web application security testing.
  2. Censys Subdomain Finder - Enumerate subdomains using the Censys API. Useful for passive reconnaissance and attack surface discovery.

Lateral Movement:

  1. NetExec - The Network Execution Tool, a modern and actively maintained successor to CrackMapExec (which is archived). Enhanced features for network security assessment and post-exploitation with support for SMB, LDAP, MSSQL, SSH, WinRM, FTP, and more.
  2. Certipy - Tool for Active Directory Certificate Services (AD CS) enumeration and abuse. Supports certificate theft, privilege escalation, and persistence through AD CS. AD CS attacks are increasingly critical in red team operations.

Why:

  • NetExec: CrackMapExec is archived and no longer maintained. NetExec is the community-driven successor with active development.
  • Certipy: AD CS attacks have become one of the most important attack vectors in Active Directory environments since the SpecterOps Certified Pre-Owned research.
  • Caido: Modern alternative to Burp Suite that is gaining rapid adoption in the security community.
  • Censys: Complements existing OSINT tools for comprehensive reconnaissance.

Checklist

  • Format matches existing table entries
  • Tools are actively maintained and open-source
  • Tools are relevant to red team operations

fauzan171 added 2 commits May 14, 2026 00:33
Added 4 essential reconnaissance tools from ProjectDiscovery:
- nuclei: Template-based vulnerability scanner (21k+ stars)
- subfinder: Passive subdomain enumeration tool (10k+ stars)
- httpx: Fast multi-purpose HTTP toolkit
- naabu: Fast and reliable port scanner

These are among the most widely used modern red team recon tools.
Added 4 new tools to enhance the toolkit:
- NetExec: Modern successor to CrackMapExec for network security assessment
- Certipy: AD CS enumeration and abuse tool for certificate-based attacks
- Caido: Next-gen web security proxy with AI features (Burp Suite alternative)
- Censys Subdomain Finder: Passive reconnaissance via Censys API

These tools fill important gaps in lateral movement, AD CS attacks,
reconnaissance, and web application testing capabilities.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant