MagicTree – Penetration Tester Productivity Tool


MagicTree is a penetration tester productivity tool, it allows easy and straightforward data consolidation, querying, external command execution, and report generation. In case you wonder, “Tree” is because its stores all the data in a tree, and “Magic” because it is designed to magically do the most cumbersome and boring part of penetration testing – data management and reporting.

I think this could be combined with something like dradis (the Open Source Security Reporting Tool) for very good project management.

MagicTree is a closed-source, proprietary software. This release is distributed free of charge and so will be the future releases of MagicTree Community Edition. They plan on offering a reasonably priced professional edition soon.


MagicTree Beta Two is mostly written in Java and has been tested on Linux, Windows, and MacOS. It has no complicated installation procedure.

Documentation is available here:

MagicTree Docs

You can download MagicTree here:

MagicTree-1300.jar

Or read more here.

Posted in: Hacking News, Security Software

, , , , , , , , , , , ,


Latest Posts:


OWASP APICheck - HTTP API DevSecOps Toolset OWASP APICheck – HTTP API DevSecOps Toolset
APICheck is an HTTP API DevSecOps toolset, it integrates existing tools, creates execution chains easily and is designed for integration with 3rd parties.
trident - Automated Password Spraying Tool trident – Automated Password Spraying Tool
The Trident project is an automated password spraying tool developed to be deployed on multiple cloud providers and provides advanced options around scheduling
tko-subs - Detect & Takeover Subdomains With Dead DNS Records tko-subs – Detect & Takeover Subdomains With Dead DNS Records
tko-subs is a tool that helps you to detect & takeover subdomains with dead DNS records, this could be dangling CNAMEs point to hosting services and more.
Arcane - Tool To Backdoor iOS Packages (iPhone ARM) Arcane – Tool To Backdoor iOS Packages (iPhone ARM)
Arcane is a simple script tool to backdoor iOS packages (iPhone ARM) and create the necessary resources for APT repositories.
SharpHose - Asynchronous Password Spraying Tool SharpHose – Asynchronous Password Spraying Tool
SharpHose is an asynchronous password spraying tool in C# for Windows environments that takes into consideration fine-grained password policies and can be run over Cobalt Strike's execute-assembly.
Axiom - Pen-Testing Server For Collecting Bug Bounties Axiom – Pen-Testing Server For Collecting Bug Bounties
Project Axiom is a set of utilities for managing a small dynamic infrastructure setup for bug bounty, basically a pen-testing server out of the box with 1-line.


2 Responses to MagicTree – Penetration Tester Productivity Tool

  1. geekp0wer January 13, 2011 at 6:02 pm #

    I prefer the report generation for OpenVAS and Nessus in OSSIM. I also use a free Perl script from FYRM, NessusPBE.pl, to consolidate from nbe files into TSV format.

  2. Frisbee January 26, 2011 at 5:34 am #

    I was wasting away on twitter trying to find something to cure my boredom – and WHIZ – someone I follow tweeted this post. Now, I am not quite as bored. Thanks for posting awesome material. – Frisbee