{"id":7853,"date":"2023-01-21T22:54:14","date_gmt":"2023-01-21T21:54:14","guid":{"rendered":"https:\/\/michlstechblog.info\/blog\/?p=7853"},"modified":"2026-01-20T08:56:30","modified_gmt":"2026-01-20T07:56:30","slug":"tools-sites-tools-sites-overview","status":"publish","type":"post","link":"https:\/\/michlstechblog.info\/blog\/tools-sites-tools-sites-overview\/","title":{"rendered":"Tools &#038; Sites: Tools &#038; Sites overview"},"content":{"rendered":"<div class=\"twoclick_social_bookmarks_post_7853 social_share_privacy clearfix 1.6.4 locale-en_US sprite-en_US\"><\/div><div class=\"twoclick-js\"><script type=\"text\/javascript\">\/* <![CDATA[ *\/\njQuery(document).ready(function($){if($('.twoclick_social_bookmarks_post_7853')){$('.twoclick_social_bookmarks_post_7853').socialSharePrivacy({\"services\":{\"flattr\":{\"uid\":\"Michl\",\"status\":\"on\",\"the_title\":\"Tools%20%26%23038%3B%20Sites%3A%20Tools%20%26%23038%3B%20Sites%20overview\",\"the_excerpt\":\"This%20is%20a%20list%20of%20useful%20tools%20and%20links%0D%0AProcesses%0D%0AProcess%20Hacker%20-%26gt%3B%20Can%20show%20Windows%20firewall%20matches%0D%0ASysinternals%20Process%20Monitor%0D%0ASysinternals%20Process%20Explorer%0D%0ANetwork%0D%0ASniffing%0D%0AEttercap%0D%0AWireshark%0D%0Anetsh%20-%20netsh%20trace%0D%0AMicrosoft%20Message%20Analyzer%0D%0Awifite%20-%20Recover%20WiFi%20credentials%20%0D%0ANzyme%20-%20WLAN%20intrution%20detection%0D%0AGet%20lost%20login%2FCredentials%2FPassword%0D%0AHydra%20-%26gt%3B%20Login-Cracker%0D%0AWin%20...\",\"txt_info\":\"2 clicks for more data protection:\\r\\n\\r\\nOnly when you click here, the button will be come active and you can send your recommendation to Flattr. When activating, data are transmitted to third parties. \",\"perma_option\":\"off\"}},\"txt_help\":\"When you activate these fields by clicking, information to Flattr may be transferred abroad, and probably may also stored there.\",\"settings_perma\":\"Enable permanently and accept data transmission. \",\"info_link\":\"http:\\\/\\\/www.heise.de\\\/ct\\\/artikel\\\/2-Klicks-fuer-mehr-Datenschutz-1333879.html\",\"uri\":\"https:\\\/\\\/michlstechblog.info\\\/blog\\\/tools-sites-tools-sites-overview\\\/\",\"post_id\":7853,\"post_title_referrer_track\":\"Tools+%26%23038%3B+Sites%3A+Tools+%26%23038%3B+Sites+overview\",\"display_infobox\":\"on\"});}});\n\/* ]]> *\/<\/script><\/div><p>This is a list of useful tools and links<\/p>\n<h5>Processes<\/h5>\n<p>Process Hacker -&gt; Can show Windows firewall matches<br \/>\n<a href=\"https:\/\/docs.microsoft.com\/de-de\/sysinternals\/downloads\/sysinternals-suite\">Sysinternals<\/a> Process Monitor<br \/>\n<a href=\"https:\/\/docs.microsoft.com\/de-de\/sysinternals\/downloads\/sysinternals-suite\">Sysinternals<\/a> Process Explorer<\/p>\n<h5>Network<\/h5>\n<h6>Sniffing<\/h6>\n<p>Ettercap<br \/>\nWireshark<br \/>\nnetsh &#8211; netsh trace<br \/>\nMicrosoft Message Analyzer<br \/>\nwifite &#8211; Recover WiFi credentials <!-- example wifite --random-mac --kill --><br \/>\nNzyme &#8211; WLAN intrution detection<\/p>\n<h5>Get lost login\/Credentials\/Password<\/h5>\n<p><a href=\"https:\/\/github.com\/vanhauser-thc\/thc-hydra\" target=\"_blank\" rel=\"noopener\">Hydra <\/a>-&gt; Login-Cracker<br \/>\nWindows Login Unlocker -&gt; Reset account in WinPE<br \/>\nchntpw -&gt; Reset account in WinPE<br \/>\n<a href=\"https:\/\/github.com\/AlessandroZ\/LaZagne\" target=\"_blank\" rel=\"noopener\">LaZagne <\/a>-&gt; &#8211; Python open source application used to retrieve lots of passwords<br \/>\n<a href=\"https:\/\/www.openwall.com\/john\/\" target=\"_blank\" rel=\"noopener\">John the Ripper<\/a><br \/>\n<a href=\"https:\/\/github.com\/magnumripper\/JohnTheRipper\" target=\"_blank\" rel=\"noopener\">John the Ripper<\/a><br \/>\nzip2john -&gt; extract hash from zip -&gt; Get pass with John the Ripper<br \/>\n<a href=\"https:\/\/miloserdov.org\/?p=4205\" target=\"_blank\" rel=\"noopener\">DPAPI explained<\/a> (used for Windows Vault)<\/p>\n<h5>Clone OS\/Disk Imaging<\/h5>\n<p>clonezilla<br \/>\n<a href=\"https:\/\/rufus.ie\/en\/\" target=\"_blank\" rel=\"noopener\">Rufus <\/a>&#8211; Create USB Bootstick<\/p>\n<h5>Recover files<\/h5>\n<p>photorec -&gt; recover files<br \/>\nTestDisk -&gt; recover partitions<br \/>\n<a href=\"https:\/\/www.osforensics.com\/tools\/mount-disk-images.html\" target=\"_blank\" rel=\"noopener\">OSFMount <\/a>-&gt; Mount images created by dd or ddrescue under Windows<\/p>\n<h5><strong>Check webserver<\/strong><\/h5>\n<p>DIRB &#8211; Search for well known folders and look for credentials&#8230;<br \/>\nWPScan &#8211; Check WordPress for known vulnarbiliteies<br \/>\nSQLmap &#8211; Check for SQL Injections<\/p>\n<h5>Intercept and inspect https traffic<\/h5>\n<p>OWAP Zed Attack Proxy (ZAP)<br \/>\nFiddler<br \/>\nBurp<br \/>\nmitmproxy<\/p>\n<h5><strong>Security Tools<\/strong><\/h5>\n<p>metasploit -&gt; Check again vulnarbiliteies<br \/>\nPowerShell Empire<br \/>\n<a href=\"https:\/\/github.com\/ParrotSec\/mimikatz\">mimikatz<\/a> -&gt; Extract credentials from Windows<br \/>\nGhidra -&gt; Reverse engineering<br \/>\n<a href=\"https:\/\/github.com\/uxmal\/reko\">Reko<\/a> &#8211; Decompiler\/Reverse engineering<br \/>\n<a href=\"http:\/\/java-decompiler.github.io\/\">JD<\/a> &#8211; Java Decompiler<br \/>\n<a href=\"https:\/\/github.com\/GhostPack\/Rubeus\" target=\"_blank\" rel=\"noopener\">Rubeus <\/a> -&gt; Raw Kerberos interaction<br \/>\n<a href=\"https:\/\/github.com\/swisskyrepo\/PayloadsAllTheThings\/blob\/master\/Methodology%20and%20Resources\/Windows%20-%20Privilege%20Escalation.md\" target=\"_blank\" rel=\"noopener\">Windows Privilege Escalation<\/a> &#8211; Scripts , etc&#8230;<br \/>\nAnalyze physical Memory, memory dumps -&gt; <a href=\"https:\/\/www.volatilityfoundation.org\/\" target=\"_blank\" rel=\"noopener\">Volatility<\/a>, <a href=\"https:\/\/www.fireeye.com\/services\/freeware\/redline.html\" target=\"_blank\" rel=\"noopener\">Redline<\/a>, <a href=\"http:\/\/www.rekall-forensic.com\/\" target=\"_blank\" rel=\"noopener\">Rekall<\/a> , <a href=\"http:\/\/www.orionforensics.com\/downloads\/memgator\/\" target=\"_blank\" rel=\"noopener\">MemGator<\/a><br \/>\n<a href=\"https:\/\/nmap.org\/\">nmap<\/a> &#8211; Port scanner<\/p>\n<p><a href=\"https:\/\/docs.velociraptor.app\/\">velociraptor<\/a> &#8211; Forensic tool kit<\/p>\n<p><a href=\"https:\/\/github.com\/thewhiteninja\/ntfstool?\">ntfstool<\/a> &#8211; Restore files from ntfs formatted volumes<\/p>\n<p>&nbsp;<\/p>\n<h5>Post Explotation Frameworks<\/h5>\n<p><a href=\"https:\/\/github.com\/cobbr\/Covenant\">Covenant<\/a><br \/>\n<a href=\"https:\/\/github.com\/PowerShellMafia\/PowerSploit\">Powersploit<\/a><\/p>\n<h5>Tool collections<\/h5>\n<p><a href=\"https:\/\/www.kls-soft.com\/wscc\/\">WSCC<\/a><\/p>\n<h5>Windows 10<\/h5>\n<p>Sophia Script -&gt; Disable some Windows 10 functions<\/p>\n<h6>Windows 11<\/h6>\n<p><a href=\"https:\/\/github.com\/Raphire\/Win11Debloat\">DeBloated Win11\u00a0 <\/a>WIndow11 debloated <!--https:\/\/www.heise.de\/forum\/heise-online\/Kommentare\/Microsoft-kann-Windows-11-nicht-durchsetzen-Nutzerzahlen-von-Windows-10-steigen\/DeBloated-Win11-lokales-Konto-O-O-ShutUp-und-AppBlaster-StartIsBack\/posting-45519046\/show\/--><\/p>\n<h5>Boot Manager<\/h5>\n<p><a href=\"https:\/\/www.ventoy.net\/en\/index.html\">Ventoy<\/a> &#8211; Can boot iso, wim images&#8230;.<\/p>\n<p><a href=\"https:\/\/pendrivelinux.com\/\">Yumi<\/a> &#8211; Multiboot USB Stick<\/p>\n<h5>Docker<\/h5>\n<p><a href=\"https:\/\/github.com\/aquasecurity\/trivy\">Trivy<\/a> &#8211; Scans docker images for vulnerabilities<\/p>\n<h5>Copy Tools<\/h5>\n<p><a href=\"https:\/\/rclone.org\/crypt\/\" target=\"_blank\" rel=\"noopener\">rcrypt <\/a>&#8211; Copies files to various targets, can also encrypted data (webdav,s3, &#8230;.). Available for Windows, Linux..<\/p>\n<h5>CAD<\/h5>\n<p><!-- https:\/\/www.heise.de\/hintergrund\/Software-Ueberblick-Gratis-CAD-fuer-Maker-4162991.html?seite=11 --><br \/>\nTinkercad<br \/>\nFreeCAD<br \/>\nLibreCAD<\/p>\n<h5>Electronic<\/h5>\n<p>Kicad &#8211; electronic design automation (EDA)<br \/>\n<a href=\"https:\/\/qelectrotech.org\/\" target=\"_blank\" rel=\"noopener\">QElectroTech <\/a>&#8211; create electric diagrams. Usefull for drawing electric diagrams for your home<\/p>\n<h5>Audio CD ripping\/grapping<\/h5>\n<p>RipperX &#8211; Linux<br \/>\n<del datetime=\"2023-06-22T10:55:02+00:00\">CDex &#8211; Windows<\/del> Newer Version comes with adware<br \/>\n<a href=\"https:\/\/www.freac.org\/\" target=\"_blank\" rel=\"noopener\">Fre:ac<\/a> &#8211; Windows<\/p>\n<h5>QR codes<\/h5>\n<p>Qreator &#8211; Generates WLAN, URL QRCodes (Linux)<br \/>\n<a href=\"https:\/\/www.nirsoft.net\/utils\/qr_code_generator.html\" target=\"_blank\" rel=\"noopener\">SimpleCodeGenerator <\/a>&#8211; Nirsoft quickly generate QR Code (Windows)<\/p>\n<h5>Multimedia center, Internet radio<\/h5>\n<p><a href=\"https:\/\/kodi.tv\/\" target=\"_blank\" rel=\"noopener\">Kodi <\/a>&#8211; Media center<br \/>\n<a href=\"https:\/\/volumio.com\/\" target=\"_blank\" rel=\"noopener\">Volumio <\/a>&#8211; Raspberry Audio Player<br \/>\n<a href=\"https:\/\/www.picoreplayer.org\/\" target=\"_blank\" rel=\"noopener\">Pi Core Player<\/a><br \/>\n<a href=\"https:\/\/moodeaudio.org\" target=\"_blank\" rel=\"noopener\">moodeaudio <\/a>&#8211; Raspberry Audio Player<br \/>\nBubbleUPnP Server &#8211; Chromecast server, UPNP renderer&#8230;.<\/p>\n<h5>Programming<\/h5>\n<p><a href=\"https:\/\/github.com\/icsharpcode\/ILSpy\" target=\"_blank\" rel=\"noopener\">ILSpy<\/a> &#8211; .NET\/C# decompiler<\/p>\n<h5>Testing<\/h5>\n<p>Testing\/control Websites\u00a0 &#8211; <a href=\"https:\/\/www.selenium.dev\/\" target=\"_blank\" rel=\"noopener\">Selenium<\/a><\/p>\n<h5>Hypervisor<\/h5>\n<p><a href=\"https:\/\/docs.harvesterhci.io\/v1.1#iso-installation\">Harvestor<\/a><\/p>\n<h5>Performance<\/h5>\n<h6>DIskperformance<\/h6>\n<p><a href=\"http:\/\/www.iometer.org\/doc\/downloads.html\" target=\"_blank\" rel=\"noopener\">IOMeter<\/a> &#8211; <span class=\"HwtZe\" lang=\"en\"><span class=\"jCAhz ChMk0b\"><span class=\"ryNqvb\">Surface that takes some getting used to<\/span><\/span><\/span>, old,\u00a0 but still working.<\/p>\n<p><a href=\"https:\/\/github.com\/microsoft\/diskspd\" target=\"_blank\" rel=\"noopener\">DiskSpd<\/a> &#8211; Microsoft tool for checking DIsk IO<\/p>\n<h6>Networkperformance<\/h6>\n<p><a href=\"https:\/\/iperf.fr\/\" target=\"_blank\" rel=\"noopener\">iperf<\/a> &#8211; Supports TCP\/UDP, differnet packet sizes&#8230;<\/p>\n<h6>Windows im Docker Container<\/h6>\n<p><a href=\"https:\/\/github.com\/winapps-org\/winapps\">Winapps-org<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is a list of useful tools and links Processes Process Hacker -&gt; Can show Windows firewall matches Sysinternals Process Monitor Sysinternals Process Explorer Network Sniffing Ettercap Wireshark netsh &#8211; netsh trace Microsoft Message Analyzer wifite &#8211; Recover WiFi credentials Nzyme &#8211; WLAN intrution detection Get lost login\/Credentials\/Password Hydra -&gt; Login-Cracker Windows Login Unlocker -&gt; &hellip; <a href=\"https:\/\/michlstechblog.info\/blog\/tools-sites-tools-sites-overview\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Tools &#038; Sites: Tools &#038; Sites overview<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12,1654],"tags":[],"class_list":["post-7853","post","type-post","status-publish","format-standard","hentry","category-miscellaneous","category-tools-miscellaneous"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/7853","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/comments?post=7853"}],"version-history":[{"count":52,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/7853\/revisions"}],"predecessor-version":[{"id":10155,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/7853\/revisions\/10155"}],"wp:attachment":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/media?parent=7853"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/categories?post=7853"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/tags?post=7853"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}