fireELF fireELF is an opensource fileless Linux malware framework that’s cross-platform and allows users to easily create and manage payloads. By default, it comes with ‘memfd_create’ which is a new way to run Linux...
DeathMetal DeathMetal is a suite of tools that interact with Intel AMT. It’s kind of a foray into a world filled with intrigue and reversing puzzles with useful results. Since this is super serious,...
SharpExec SharpExec is an offensive security C# tool designed to aid with lateral movement. It currently includes: -WMIExec – Semi-Interactive shell that runs as the user. Best described as a less mature version of...
Gorsair Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers. Once it has access to the docker daemon, you can use Gorsair to directly execute commands...
TrevorC2 – Command, and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy (@HackingDave) Website: https://www.trustedsec.com Note that this is a very early release – heavy randomization and encryption to be added soon. TrevorC2...
Exploitation / Reverse Engineering
by do son · Published March 25, 2019 · Last modified July 30, 2022
Zeratool Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems This tool uses angr to concolically analyze binaries by hooking printf and looking for unconstrained paths. These program states are then weaponized for remote...
Virtual Reality This is a backdoor project for windows operating systems. Intended audience This is a proof-of-concept stealthy backdoor aimed to aid red teams in maintaining control of their targets during the security evaluation...
AVET AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques. What & Why: when running an exe file made with msfpayload...
gorsh A Golang Implant and Tmux-driven C2 Interface Originally forked from – sysdream/hershell Fork Changes Changes after fork: Uses tmux as a pseudo-C2-like interface, creating a new window with each agent callback Download files with...
ThunderShell ThunderShell is a C# RAT that communicates via HTTP requests. All the network traffic is encrypted using a second layer of RC4 to avoid SSL interception and defeat network detection on the target...
Brosec is a terminal based reference utility designed to help us infosec bros and broettes with useful (yet sometimes complex) payloads and commands that are often used during work as infosec practitioners. An example...
msf-autoshell Give it a .nessus file and it’ll get you Metasploit shells. I’ve included the early and incomplete programs to make it easier for people who want to learn how to use the python-libnessus...
Exploitation / Post Exploitation
by do son · Published February 25, 2019 · Last modified May 20, 2020
AutoRDPwn is a script created in Powershell and designed to automate the Shadow attack on Microsoft Windows computers. This vulnerability allows a remote attacker to view his victim’s desktop without his consent, and even control it on...
DoHC2 DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH). This is built for the popular Adversary Simulation and Red Team...
What is Kitty? Kitty is an open-source modular and extensible fuzzing framework written in Python, inspired by OpenRCE’s Sulley and Michael Eddington’s (and now Deja Vu Security’s) Peach Fuzzer. Goal When we started writing Kitty, our goal...
Secure Your Connection
