LightsOut LightsOut will generate an obfuscated DLL that will disable AMSI & ETW while trying to evade AV. This is done by randomizing all WinAPI functions used, xor encoding strings, and utilizing basic sandbox...
Commander Commander is a command and control framework (C2) written in Python, Flask, and SQLite. It comes with two agents written in Python and C. Features Fully encrypted communication (TLS) Multiple Agents Obfuscation Interactive...
In an increasingly interconnected world, the importance of securing data has never been more pertinent. In the shadows of our digital landscapes, zero-day vulnerabilities often lurk, waiting to be exploited. Today, we cast a...
GitHound GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. It has earned me over $4000 applied to Bug Bounty research. Corporate and Bug...
FireEye Labs Obfuscated String Solver Rather than heavily protecting backdoors with hardcore packers, many malware authors evade heuristic detections by obfuscating only key portions of an executable. Often, these portions are strings and resources...
chainsaw – Rapidly Search and Hunt through Windows Event Logs Chainsaw provides a powerful “first-response” capability to quickly identify threats within Windows event logs. It offers a generic and fast method of searching through...
Ostorlab Ostorlab is a security scanning platform that enables running complex security scanning tasks involving multiple tools in an easy, scalable, and distributed way. Ostorlab provides: CLI to run scans locally and on Ostorlab’s...
RevSuit – A Flexible and Powerful Reverse Connection Platform RevSuit is a flexible and powerful reverse connection platform designed for receiving connections from the target hosts in penetration. It currently supports HTTP, DNS, RMI,...
RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service...
murphysec MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features Analyze dependencies being used by your project, including direct and indirect dependencies Detect...
