slopShell

slopShell php webshell 使い方を説明するのを忘れていたので、ここで説明します。 このシェルを動作させるには、2つのものが必要です：PHPファイルのアップロードを許可する被害者（自分自身、教育環境の場合）と、このウェブシェルにHTTPリクエストを送信する方法です（クライアントスクリプトがこのシェルと通信するための100％最良の方法です）。 これまでにコミュニティから頂いたサポートに感謝します。本当に私たちにとって大きな意味があります。今後このシェルに追加予定の機能は以下の通りです。さらに素晴らしいものにするためです。 相互TLS（可能であればCAを動的に生成する機能付...

RustHound

此版本仅与BloodHound Legacy 4.x 兼容 与BloodHound Community Edition CE 兼容的版本可在此处找到 RustHound-CE。 摘要 限制 描述 如何编译 使用 Makefile 使用 Dockerfile 使用 Cargo Linux x8664 静态版本 从 Linux 编译 Windows 静态版本 从 Linux 编译 macOS 静态版本 优化二进制文件大小 如何构建文档 用法 演示 简单用法 FQDN 解析模块 ADCS 收集模块 统计 路线图 链接 限制 并非所有 SharpHound 的功能都已实现。RustHound...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

AggressorScripts

Aggressor スクリプト 複数のソースから収集したCobalt Strike 3.0+用のAggressorスクリプトのコレクション AllInOne.cna v1 - 削除済み、旧バージョン Cobalt Strikeのユーザーエクスペリエンスを向上させるための汎用スクリプト。カスタムメニューの作成、ログ記録、永続化、列挙、サードパーティスクリプトの統合。 バージョン2は現在開発中です！ ArtifactPayloadGenerator.cna HTTP/HTTPSリスナーに基づいて、すべてのタイプのStageless/Stagedペイロードを生成します...

Invoke-EDRChecker

Invoke-EDRChecker 该脚本将检查正在运行的进程、进程元数据、加载到当前进程的DLL以及每个DLL的元数据、常见安装目录、已安装的服务、注册表和正在运行的驱动程序，以检测已知的防御产品，如杀毒软件、EDR和日志记录工具。 该脚本也可以加载到您的C2服务器中，例如在PoshC2中，将脚本放入您的modules目录，加载模块然后运行它。注意：该脚本现已包含在PoshC2中，因此无需手动添加。 该脚本还具有对远程目标执行检查的能力（如果您拥有相应权限），但目前这些检查仅限于进程检查、常见安装目录和已安装的服务。 我会在时间允许时继续添加和改进列表。完整的路线图见下文。...

Metasploit Weekly Wrap-Up 01/26/24

Direct Syscalls Support for Windows Meterpreter Direct system calls are a well-known technique that is often used to bypass EDR/AV detection. This technique is particularly useful when dynamic analysis is performed, where the security software monitors every process on the system to detect any...

Casbaneiro Banking Malware Goes Under the Radar with UAC Bypass Technique

The financially motivated threat actors behind the Casbaneiro banking malware family have been observed making use of a User Account Control UAC bypass technique to gain full administrative privileges on a machine, a sign that the threat actor is evolving their tactics to avoid detection and...

DonPAPI - Dumping DPAPI Credz Remotely

Dumping revelant information on compromised targets without AV detection DPAPI dumping Lots of credentials are protected by DPAPI. We aim at locating those "secured" credentials, and retreive them using : User password Domaine DPAPI BackupKey Local machine DPAPI Key protecting TaskScheduled blob...

What we like about Microsoft Defender for Endpoint

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. It’s no secret that the security industry generally likes Microsoft Defender for Endpoint. After a few months of using and integrating it with our platform here at Expel, we feel the...

Ninja - Open Source C2 Server Created For Stealth Red Team Operations

Ninja C2 is an Open source C2 server created by Purple Team to do stealthy computer and Active directoty enumeration without being detected by SIEM and AVs , Ninja still in beta version and when the stable version released it will contains many more stealthy techinques and anti-forensic to create...

Hershell - Multiplatform Reverse Shell Generator

Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are great,...

Adwind Dodges AV via DDE

This blog post is authored by Paul Rascagneres, Vitor Ventura and with the contribution of Tomislav Pericin and Robert Perica from ReversingLabs. Introduction Cisco Talos, along with fellow cybersecurity firm ReversingLabs, recently discovered a new spam campaign that is spreading the Adwind 3.0...

Updated GravityRAT Malware Adds Advanced AV Detection

Researchers tracking the evolution of the remote access trojan GravityRAT warn that developers behind the malware have made key changes to the RAT’s code in an attempt to decrease antivirus detection. “We’ve seen file exfiltration, remote command execution capability and anti-vm techniques added...

AutoIt Scripting Used By Overlay Malware to Bypass AV Detection

IBM’s X-Force Research team reports hackers attacking Brazilian banks are using the Windows scripting tool called AutoIt to install a remote access Trojan RAT capable of hijacking browser-based banking sessions. The use of AutoIt, researchers said, reduces the likelihood of antivirus detection...

The Rise of Super-Stealthy Digitally Signed Malware—Thanks to the Dark Web

Guess what's more expensive than counterfeit United States passports, stolen credit cards and even guns on the dark web? It's digital code signing certificates. A recent study conducted by the Cyber Security Research Institute CSRI this week revealed that stolen digital code-signing certificates...

Authenticated WMI Exec Via Powershell

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/powershell' require 'msf/core/post/windows/priv' require 'msf/core/exploit/powershell/dotnet' class MetasploitModule...

Cloakify - Data Exfiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Evade AV Detection

Cloakify Toolset - Data Exfiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Defeat Data Whitelisting Controls; Evade AV Detection. Text-based steganography usings lists. Convert any file type e.g. executables, Office, Zip, images into a list of everyday strings. Ve...

b374k 3.2.3 2.8 CSRF / Command Injection Vulnerabilities

b374k web shell versions 2.8 and 3.2.3 suffer from a cross site request forgery vulnerability that allows for remote command injection. Vendor: ============================================ github.com/b374k/b374k code.google.com/p/b374k-shell/downloads/list code.google.com/archive/p/b374k-shell/...

Israeli Think-Tank Site Serves Sweet Orange Exploit

Attackers have compromised the website of a prominent Israel-based, Middle East foreign policy-focused think tank, the Jerusalem Center for Public Affairs JCPA. On Friday, researchers from Cyphort reported that the site was serving the Sweet Orange exploit kit via drive-by download. At the time o...

[Weevely v1.1] Stealth tiny PHP web shell

Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation , and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones. Weevely is currently included in Backtrack and Backbox...