Primary Categories: [[Cactus]] Links: [[Cactus Articles]] / [[Cactus CVE's]] / [[Cactus Ransom Note]] / [[Cactus TTP's]] # [[Cactus Tools]] ## Discovery - Nmap - Nmap is a free, open-source utility for network discovery and security auditing that maps networks and audits them for security issues. It is used to identify live hosts, services, and open ports on a network, and to detect operating systems and vulnerabilities. - https://nmap.org/ - SoftPerfect NetScan - This fast, highly configurable IPv4/IPv6 scanner can streamline many of your network support procedures. Its well-designed interface, light weight and portability coupled with an extensive range of options and advanced features make SoftPerfect Network Scanner an invaluable tool, whether you are a professional system administrator, someone providing occasional network maintenance, or a general user interested in computer security. - https://www.softperfect.com/products/networkscanner/ ## RMM Tools - AnyDesk - AnyDesk is used for remote desktop access, allowing users to control one computer from another device as if they were physically there. - https://anydesk.com/en - Splashtop - Splashtop is used for remote access to a computer or device, allowing users to view and control it from another device, anywhere with an internet connection. - https://www.splashtop.com/ - SuperOps - SuperOps is a unified platform for managed service providers (MSPs) and IT teams that combines Professional Services Automation (PSA) and Remote Monitoring and Management (RMM) capabilities with AI-powered automation. - https://superops.com/ ## OffSec - Cobalt Strike - Cobalt Strike is a legitimate commercial adversary simulation and penetration testing tool used by cybersecurity professionals to assess network security. However, due to its powerful capabilities, it is also widely used by malicious threat actors, including ransomware gangs and state-sponsored groups, for real-world cyberattacks. - https://www.cobaltstrike.com/ ## Networking - Chisel - Chisel operates in a client-server model, where the server listens for connections, and the client establishes a connection to the server to forward or relay traffic. - https://www.kali.org/tools/chisel/ ## Exfiltration - Rclone - Rclone is a command-line tool used for managing files on cloud storage, allowing users to copy, sync, and transfer files between various cloud providers and local systems. - https://rclone.org/