IoT-Implant-Toolkit IoT-Implant-Toolkit is a framework of useful tools for malware implantation research of IoT devices. It is a toolkit consisted of essential software tools on firmware modification, serial port debugging, software analysis and stable...
CoffeeShot: Avoid Detection with Memory Injection CoffeeShot is an evasion framework that injects payload from Java-based programs into designated processes on Microsoft Windows. It assists blue team members in assessing the effectiveness of their...
GoAltdns GoAltdns is a permutation generation tool that can take a list of subdomains, permute them using a wordlist, insert indexes, numbers, dashes and increase your chance of finding that esoteric subdomain that no-one...
Twitter Intelligence A project is written in Python to twitter tracking and analysis without using Twitter API. Database SQLite is used as the database. Tweet data are stored on the Tweet, User, Location, Hashtag,...
Exploitation / Network PenTest / Post Exploitation / Web Information Gathering / WebApp PenTest
by do son · Published September 28, 2018
tactical-exploitation I’ve always been a big proponent of a tactical approach to penetration testing that does not focus on exploiting known software vulnerabilities but relies on old-school techniques such as information gathering and brute...
PSKracker is a collection of WPA/WPA2/WPS default algorithms/password generators/pingens written in C. Attack Types means PSKracker will output a large number of possible keys and should be piped into a password recovery tool, such as...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published September 25, 2018 · Last modified October 10, 2021
Cloud Inquisitor improves the security posture of an AWS footprint through: monitoring AWS objects for ownership attribution, notifying account owners of unowned objects, and subsequently removing unowned AWS objects if ownership is not resolved....
Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published September 25, 2018
OWASP JoomScan Project OWASP Joomla! Vulnerability Scanner is an open source project, developed with the aim of automating the task of vulnerability detection and reliability assurance in Joomla CMS deployments. Implemented in Perl, this...
shootback is a reverse TCP tunnel let you access target behind NAT or firewall. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python(2.7/3.4+) standard library. How it...
autoDANE is a tool to automate the process of mapping and compromising internal networks. Given the prevalence of Microsoft Active Directory domains as the primary means of managing large corporate networks globally; one of...
rop-tool v2.4.2 A tool to help you writing binary exploits FEATURES String searching, Gadget searching, patching, info, heap visualization, disassembling Colored output Intel and AT&T flavor Support of ELF, PE and MACH-O binary format...
by do son · Published September 23, 2018 · Last modified October 26, 2020
Security Knowledge Framework is an expert system application that uses the OWASP Application Security Verification Standard with detailed code examples (secure coding principles) to help developers in pre-development and post-development phases and create applications...
Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with...
Fuzzinator Fuzzinator is a framework helping you to deal with the common fuzzing tasks, like running fuzz jobs, updating the targets, and reducing the inputs that induced failures. The figure below shows a high-level overview...
Network PenTest / Post Exploitation
by do son · Published September 21, 2018 · Last modified October 10, 2021
p0wnedShell is an offensive PowerShell host application written in C# that does not rely on powershell.exe but runs powershell commands and functions within a powershell runspace environment (.NET). It has a lot of offensive...
Secure Your Connection
