Attify OS – Distro for pentesting IoT devices AttifyOS is a distro intended to help you perform a security assessment and penetration testing of Internet of Things (IoT) devices. It saves you a lot...
Graffiti Graffiti is a tool to generate obfuscated oneliners to aid in penetration testing situations. It accepts the following languages for encoding: Python Perl Batch Powershell PHP Bash It will also accept a language...
LiMEaide LiMEaide is a python application designed to remotely dump RAM on a Linux client and create a volatility profile for later analysis on your localhost. I hope that this will simplify Linux digital...
BloodHound.py BloodHound.py is a Python-based ingestor for BloodHound, based on Impacket. This version of BloodHound.py is only compatible with BloodHound 4.2 and 4.3. For BloodHound CE, check out the bloodhound-ce branch Limitations BloodHound.py currently has the following limitations:...
StegCracker Steganography brute-force utility to uncover hidden data inside files. Changelog v2.0.9 Made default wordlist handling more user-friendly, sould address issue #14 – If no wordlist is specified Kali Linuxes rockyou.txt will be used...
Post Exploitation / Vulnerability Analysis
by do son · Published April 30, 2019 · Last modified June 26, 2022
Windows Exploit Suggester – Next Generation (WES-NG) WES-NG is a tool based on the output of Windows’ systeminfo utility that provides you with the list of vulnerabilities the OS is vulnerable to, including any exploits...
CALDERA is an automated adversary emulation system that performs post-compromise adversarial behavior within Windows Enterprise networks. It generates plans during operation using a planning system and a pre-configured adversary model based on the Adversarial Tactics, Techniques &...
Evil Clippy A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX, and Windows. This tool was...
adidnsdump – Active Directory Integrated DNS dump tool By default, any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool...
What is StreamDump？ StreamDump is used to cut traffic packets from a pcap format file or network interface by quaternions(src_ip,src_port,dst_ip,dst_port), each TCP stream is stored in a separate pcap file, and any connection without...
CredsLeaker Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request. However, That was highly noticeable....
rtty Access your terminal behind a NAT or firewall over the web-based on your terminal’s macaddr. It is composed of the client and the server. The server is written in go language and uses the vue+iview....
kimi – Malicious Debian Package generator Script to generate malicious debian packages (debain trojans). About Kimi is name inspired from “Kimimaro” one of my favorite characters from anime called “Naruto”. Kimi is a...
Exploitation / Reverse Engineering
by do son · Published April 25, 2019 · Last modified October 31, 2019
Linux Binary Exploitation Topics Lecture 1. Memory Layout of the C program. ELF binaries. Overview of the stack during the function call. Assembly code for the function call and return. Concept of $ebp and $esp. Executable...
authoscope authoscope is a scriptable network authentication cracker. While the space for common service bruteforce is already very well saturated, you may still end up writing your own python scripts when testing credentials for web applications....
