powercat

powercat Netcat : la version powershell. PowerShell version 2 et ultérieur pris en charge Installation powercat est une fonction powershell. Vous devez d'abord charger la fonction avant de pouvoir l'exécuter. Vous pouvez placer l'une des commandes ci-dessous dans votre profil powershell pour que...

php-jpeg-injector

php-jpeg-injector Injecte des payloads PHP dans des images JPEG. Lié à ce post. Cas d'utilisation Vous avez une application web qui traite une image JPEG via la bibliothèque graphique GD de PHP. Description Ce script injecte du code PHP dans une image JPEG spécifiée. L'application web exécutera l...

xssless

xssless Un générateur automatisé de payloads XSS écrit en python. Utilisation 1. Enregistrez la ou les requêtes avec Burp proxy 2. Sélectionnez la ou les requêtes que vous souhaitez générer, puis faites un clic droit et sélectionnez "Save items" 3. Utilisez xssless pour générer votre payload :...

libprocesshider

libprocesshider Hide a process under Linux using the ld preloader. Full tutorial available at https://sysdigcloud.com/hiding-linux-processes-for-fun-and-profit/ In short, compile the library: gianluca@sid:/libprocesshider$ make gcc -Wall -fPIC -shared -o libprocesshider.so processhider.c -ldl...

haptyc

Haptyc Cadre de génération de tests Qu'est-ce que Haptyc ? Haptyc est une bibliothèque Python conçue pour ajouter la prise en charge des positions de payload et des types d'attaque Sniper/Clusterbomb/Batteringram/Pitchfork dans Turbo Intruder. Bien que Haptyc atteigne assez bien ces objectifs, il...

elfloader

Résumé elfloader est un chargeur extrêmement simple pour les fichiers ELF qui génère une représentation plate en mémoire de l'ELF. Associez-le à Rust et vous pouvez désormais écrire votre shellcode dans un langage propre, sûr et de haut niveau. N'importe quelle cible que LLVM peut cibler peut êtr...

sparkplugFuzzer

Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...

Blind-XSS-Manager

Blind-XSS-Manager Never forget where you inject. Description A Chrome extension that keeps track of the injected URL with Blind XSS payloads. It adds a unique value for each payload assigned to the URL and recorded by the extension when it gets coppied. The payloads are almost the same as the...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader is a fork of InlineExecute-Assembly to load .NET assembly and direct the output to mailslot. I rewrites it to a standalone loader with the following implementation: AES encryption payload Fileless payload support Patchless AMSI and ETW bypass using hardware...

DCOMUploadExec

DCOM Upload & Execute DCOM Lateral movement POC abusing the IMsiServer interface https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor The solution contains 2 projects DCOMUploadExec - A C++ project which hosts the lateral movement attack code AssemblyPayload - A .NET DLL...

GPU_ShellCode

gpu poisoning; hide the payload inside the gpu memory. after my older repo, in which i used the thread description to hide the payload, i wanted to find new way, so now im using nividia gpu memory using cuda api's to allocate, write, and free when there is no need for the payload to be found in...

JavaDeRe

Project Introduction Mainly used for base64-encoding class files while constructing Java deserialization echo payloads, and for decoding base64 strings back into class files to view attack payloads during incident response. PS: mainly because I'm lazy Usage Examples Run evil.java normally...

DotNET_XorCryptor

DotNET XorCryptor You can also pay attention to an older project - NET-MalwareCryptor This is a .NET executable packer with payload encryption. Use for educational purposes only. How to use? --file path - specify file name --flood - add junk classes to file --proxy - move original entry point to...

riscy-business

riscy-business Article:RISC-Y Business: Raging against the reduced machine. Prerequisites Visual Studio 2022 with the C++ Clang Compiler for Windows 16.0.5 component CMake 3.26 earlier may work, but not recommended riscvm This folder contains the VM host rv64i interpreter. To build: cd riscvm cma...

Monitor

Project Description Used for implementing privilege persistence during the post-exploitation testing phase Project Usage Step 1 : Download the project, then compile Monitor.cpp using VS. Of course, you can also use the pre-compiled one. The Monitor.cpp code is as follows: include "Windows.h" int...

St2-052

S2-052 POC Testing Original title: Tomcat Deploying war Original article: http://blog.csdn.net/caiqiiqi/article/details/77861477 Download the last affected version struts-2.5.12 from the Struts2 official website: http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip Note that you on...

Powshell-decode-payload

decode powershell gzip code sal a New-Object;a IO.StreamReadera IO.Compression.GZipStreamIO.MemoryStreamConvert::FromBase64String'xxxx',IO.Compression.CompressionMode::Decompress,Text.Encoding::ASCII.ReadToEnd sal a New-Object;a IO.StreamReadera...

Gopherus

Gopherus If you know a place which is SSRF vulnerable then, this tool will help you to generate Gopher payload for exploiting SSRF Server Side Request Forgery and gaining RCE Remote Code Execution. And also it will help you to get the Reverse shell on the victim server. And for more information y...

CVE-2017-13089

CVE-2017-13089 Payload generator for CVE-2017-13089. This version requires manually locating the stack address to be executed. Directly attacking is also likely to succeed In the shellcode section, buf is a normal payload generated with msf; simply replace it with the payload you need. Usage:...

EGESPLOIT

EGESPLOIT EGESPLOIT is a golang library for malware development, it has few unique functions for meterpreter integration. DOCUMENTATION CalculateChecksumx : Function calculates x digit 8 bit checksum for reverse HTTP/HTTPS meterpreter connections, returns the calculated checksum as string...