Exploitation / Reverse Engineering
by do son · Published August 2, 2018 · Last modified January 4, 2020
ShellGen ShellGen is a dynamic shellcode generator with multiple output types that can be formatted in binary, hexadecimal, and the typical shellcode output standard. Outputs are also able to be encrypted and shellcode can...
Fuzzotron Fuzzotron is a simple network fuzzer supporting TCP, UDP, and multithreading. Radamsa and Blab are used for test case generation. Fuzzotron exists as a first-port-of-call network fuzzer, aiming for low setup overhead. Installation...
memrepl memrepl is a Frida based script that aims to help a researcher in the task of exploitation of memory corruption related bugs. The idea is that the researcher can perform database like queries to get information about the...
PULSAR Protocol Learning, Simulation, and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilities. The tool allows modeling a protocol through machine learning techniques, such as clustering and hidden...
go-deliver Go-deliver is a payload delivery tool coded in Go. Installation To use go-deliver without installing Go and the required dependencies you can download the precompiled binaries. If you want to compile from source:...
Exploitation / Information Gathering / Metasploit / Network PenTest / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest / Wireless
by do son · Published July 8, 2018 · Last modified October 10, 2021
discover For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks. Download, setup & usage git clone https://github.com/leebaird/discover /opt/discover/ All scripts must be run from this location. cd /opt/discover/ ./update.sh ...
PSDecode This is a PowerShell script for deobfuscating other encoded PowerShell scripts. Often, malicious PowerShell scripts have several layers of encodings (Replace, Base64Decode, etc…) that, once decoded, are executed via a call to Invoke-Expression...
Kautilya Kautilya is a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests. List of Payloads Windows Gather Gather Information Hashdump and...
Grok-backdoor Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the communication. Ngrok-backdoor can generate windows, Linux and Mac binaries using Pyinstaller. Disclaimer: All the code provided in this repository is...
Invoke-ADLabDeployer Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams. During red teaming gigs, we encounter many different setups for our clients. To test our payloads and...
netpwn A framework made to automate tasks of pentesting. Written in python 2.7 Features AutoComplete – Type a few letters of the command you want and hit tab to for auto-completion. clear – Type...
Exploitation / Reverse Engineering
by do son · Published May 24, 2018 · Last modified September 4, 2023
Fibratus Fibratus is a tool for exploration and tracing of the Windows kernel. It lets you trap system-wide events such as process life-cycle, file system I/O, registry modifications or network requests among many other observability signals. In a...
SlackShell This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a...
sshLooter Script to steal passwords from ssh. Install git clone https://github.com/mthbernardes/sshLooter.git Configuration Edit the script on install.sh, and add your telegram bot api, and your userid. Call the @botfather on the telegram to create...
wildPwn – WildFly Exploitation Tool It is a tool for WildFly. The tool can be used to brute force or shell deploy. wildPwn.war contains modified Laudanum Shell. userList.txt contains common usernames and passList.txt contains common passwords. Download git clone https://github.com/hlldz/wildPwn.git Usage...
Secure Your Connection
