Maintaining Access / Network PenTest
by do son · Published March 3, 2019 · Last modified November 4, 2024
revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. What is a “reverse shell”? A reverse shell is a network connection that grants shell access to...
RID Hijacking: Maintaining Access on Windows Machines The RID Hijacking hook, applicable to all Windows versions, allows setting desired privileges to an existent account in a stealthy manner by modifying some security...
Maintaining Access / Networking
by do son · Published February 22, 2019 · Last modified August 19, 2021
shellz is a small utility to track and control your ssh, telnet, web and custom shells. Changelog v1.6 New Features c9aea01 new: added kubernetes support (closes #12) Fixes f951d8b fix: using more recent go...
Reptile LKM Linux rootkit Tested on Debian 9: 4.9.0-8-amd64 Debian 10: 4.19.0-8-amd64 Ubuntu 18.04.1 LTS: 4.15.0-38-generic Kali Linux: 4.18.0-kali2-amd64 Centos 6.10: 2.6.32-754.6.3.el6.x86_64 Centos 7: 3.10.0-862.3.2.el7.x86_64 Centos 8: 4.18.0-147.5.1.el8_1.x86_64 Features Give...
Maintaining Access / Post Exploitation
by do son · Published October 27, 2018 · Last modified November 4, 2024
WMImplant A PowerShell based tool that leverages WMI to both perform actions against targeted machines, but also as the C2 channel for issuing commands and receiving results. It will likely require...
shootback is a reverse TCP tunnel let you access target behind NAT or firewall. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python(2.7/3.4+)...
Maintaining Access / Network PenTest / Post Exploitation
by do son · Published May 2, 2018 · Last modified June 3, 2018
WinPwnage: Elevate, UAC bypass, persistence, privilege escalation, dll hijack techniques The meaning of this repo is to study the techniques. All of the samples/techniques are found online, on different blogs...
Sometimes, network administrators make the penetration tester’s life harder. Some of them do use firewalls for what they are meant to, surprisingly! Allowing traffic only onto known machines, ports and...
DAMP The Discretionary ACL Modification Project (DAMP): Persistence Through Host-based Security Descriptor Modification. This project contains several files that implement host-based security descriptor “backdoors” that facilitate the abuse of various...
pwnat, pronounced “Poe-nat”, is a tool that allows any number of clients behind NATs to communicate with a server behind a separate NAT with *no* port forwarding *no* DMZ setup,...
Exploitation / Maintaining Access
by do son · Published March 16, 2018 · Last modified August 29, 2019
Powershell-RAT The python-based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during the red team engagements to backdoor any Windows machines. It tracks the user...
REQRYPT ReQrypt is a tool for tunneling and encrypting web browser requests to hide them from local (e.g. router-level, or ISP-level) snooping and the interception. ReQrypt is useful for bypassing...
Ares is a Python Remote Access Tool. Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don’t...
Exploitation / Maintaining Access / Network PenTest
by do son · Published November 30, 2017 · Last modified October 10, 2021
Reverse Shell Backdoor is a framework to control infected machines In this repository contains two programs. A backdoor and the user’s interface. the backdoor needs to be compiled sent to...
Secure Socket Funneling (SSF) is a network tool and toolkit. It provides simple and efficient ways to forward data from multiple sockets (TCP or UDP) through a single secure TLS...
Support Securityonline.info site. Thanks!
