ulexecve This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems from userland without ever calling the execve() systemcall. In other...
BOF BOF (Boiboite Opener Framework) is a testing framework for field protocol implementations and devices. It is a Python 3.6+ library that provides means to send, receive, create, parse and...
Exploitation / Maintaining Access / Post Exploitation
by do son · Published January 17, 2023 · Last modified January 18, 2023
Striker C2 Striker is a simple Command and Control (C2) program. Features A) Agents Native agents for Linux and windows hosts. Self-contained, minimal python agent should you ever need it. HTTP(s) channels. Asynchronous...
Spartacus DLL Hijacking Spartacus is utilising the SysInternals Process Monitor and is parsing raw PML log files. You can leave ProcMon running for hours and discover 2nd and 3rd level (ie an...
KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure-based attack surfaces from a black-box perspective. This tool is a community version of the tool used to probe for...
PowerMeUp This is a powershell reverse shell that executes the commands and or scripts that you add to the powerreverse.ps1 file as well as a small library of Post-Exploitation scripts....
KeeFarce Reborn A standalone DLL that exports databases in cleartext once injected in the KeePass process. Yet another KeePass extraction tool, why? A few years ago, @denandz released KeeFarce, the first offensive tool...
geacon_pro geacon_pro is an Anti-Virus bypassing CobaltStrike Beacon written in Golang based on the geacon project. geacon_pro supports CobaltStrike version 4.1+ geacon_pro has implemented most functions of Beacon. The core of...
RustHound RustHound is a cross-platform BloodHound collector tool, written in Rust. (Linux, Windows, MacOS) No anti-virus detection and cross-compiled. RustHound generates users, groups, computers, ous, gpos, containers, domains json files to analyze...
deepce Docker Enumeration, Escalation of Privileges, and Container Escapes (DEEPCE) In order for it to be compatible with the maximum number of containers DEEPCE is written in pure sh with no...
Nimbo-C2 Nimbo-C2 is yet another (simple and lightweight) C2 framework. Nimbo-C2 agent currently supports Windows x64 only. It’s written in Nim, with some usage of .NET (by dynamically loading the...
PersistAssist PersistAssist is a fully modular persistence framework written in C#. All persistence techniques contain a cleanup method which will serve to remove the persistence aside from the persistence code....
Powershell obfuscation A simple and effective powershell obfuscation tool bypass Anti-Virus, VT. AMSI-bypass obfuscation + ETW-block obfuscation + powershell command obfuscation. The tool with the best anti-obfuscation effect at present...
ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long-forgotten GenericWrite/GenericAll DACLs over other objects in the domain. Why this tool In a lot of...
BrokenFlow A simple PoC to invoke an encrypted shellcode by using a hidden call. Introduction This code uses a simple trick to hide the instruction that effectively will jump to our...
Support Securityonline.info site. Thanks!
