Evil-WinRM This shell is the ultimate WinRM shell for hacking/pentesting. WinRM (Windows Remote Management) is the Microsoft implementation of the WS-Management Protocol. A standard SOAP-based protocol that allows hardware and...
godoh godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently, supported providers include Google, Cloudflare but also contains the...
Revssl A simple Bash script that makes a generation of OpenSSL reverse shells painless. Revssl was created mainly to automate the OpenSSL reverse shell idea from here and pack it into a...
EvilUSB Quick utility to craft executables for pentesting and managing reverse shells. Download git clone https://github.com/mgp25/EvilUSB.git Use Source: https://github.com/mgp25/
Shell Script Compiler A generic shell script compiler. Shc takes a script, which is specified on the command line and produces C source code. The generated source code is then...
EvilVM EvilVM compiler for information security research tools. The project is built around a native code Forth compiler that is deployed as a position independent shellcode. It provides a platform...
Chashell Reverse Shell over DNS Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks. It comes with a multi-client control...
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber’s PowerShell attacks and the PowerShell bypass technique presented by...
Sliver Sliver is a Command and Control (C2) system made for penetration testers, red teams, and advanced persistent threats. It generates implants (slivers) that can run on virtually every architecture...
DllToShellCode Fast Conversion Windows Dynamic Link Library To ShellCode Features Support 32-bits and 64-bits Support Compression(using ntdll RtlCompressBuffer function or aplib) Support two modes Direct invoke dllmain(lpReserved as a parameter)...
DNSlivery DNSlivery allows to deliver files to a target using DNS as the transport protocol. Features: allows to print, execute or save files to the target does not require any...
BEEMKA – Electron Exploitation Toolkit Modules Available modules [ rshell_cmd ] Windows Reverse Shell [ rshell_linux ] Linux Reverse Shell [ screenshot ] Screenshot Module [ rshell_powershell ] PowerShell Reverse...
Donut is a shellcode generation tool that creates position-independent shellcode payloads from .NET Assemblies. This shellcode may be used to inject the Assembly into arbitrary Windows processes. Given an arbitrary...
Exploitation / Information Gathering / Web Exploitation / Web Information Gathering
by do son · Published June 6, 2019 · Last modified October 25, 2022
shodansploit Shodan is a search engine on the internet where you can find interesting things all over the world. For example, we can find cameras, bitcoin streams, zombie computers, ports...
Tickey A tool to extract Kerberos tickets from Linux kernel keys. Based on the paper Kerberos Credential Thievery (GNU/Linux). Install git clone https://github.com/TarlogicSecurity/tickey cd tickey/tickey make CONF=Release After that, binary...
Support Securityonline.info site. Thanks!
