I've posted about PentestBox on redfern but since this is an excellent piece of kit i think it deserves a nice in depth thread here as well.
If you like me, like to use Windows besides Linux for security applications, this framework was made with you in mind. It offers a complete environment similar to a virtualized pentesting distro. The main difference however is that it actually runs locally, no virtualisation required which saves drastically on system resources. It's command line operated and comes with Linux utilities as well, such as; bash, cat, chmod, curl, git, gzip, ls, mv, ps, ssh, and sh and more.
A couple of notable tools would include;
- SQLmap
- Burpsuite
- Nmap
- Nikto
- John The Ripper
- Hashcat
- OWASP Zed Attack Proxy
- The Harvester
- Social Engineering Toolkit
Besides this it offers tools for reverse engineering, android security, stress testing and network analysis. Furthermore it is fully customizable and offers an option to add python and ruby tools and can be integrated with the metasploit framework
https://pentestbox.com/#downloadI'd highly reccomend this framework, it is without a doubt my favorite Windows pentesting environment.
