antipwny

antipwny Auteurs : Rohan Vazarkar, David Bitner Un IDS/IPS basé sur l'hôte écrit en C, ciblant les charges utiles Metasploit. Consignes AntiPwny nécessite .NET Framework 4.5, qui peut être acquis ici. Un installateur hors ligne est disponible ici...

CVE-2023-28252-

CVE-2023-28252- Détection de l'exploit CVE-2023-28252 Contrôle de la création de fichiers dans le répertoire où l'exploit laisse les fichiers utilisés pour l'exploitation, selon un chemin fixe dans les dossiers "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" et...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

usn_analytics

USN Analytics Compilation root@kitploit: git clone https://github.com/4n6ist/usnanalytics.git Linux root@kitploit: sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make...

CVE-2021-4034

CVE-2021-4034 Trois PoC, deux proviennent de collecte, un est personnel consistant à adapter le script Python3 en Python2. Utilisation : Utilisation en C : gcc cve-2021-4034-poc.c -o exp ./exp Utilisation avec Python2 : python2 CVE-2021-4034-py2.py Utilisation avec Python3 : python3...

CVE-2020-0796-SMB

CVE-2020-0796-SMB 이 자료는 CVE-2020-0796 취약점 재현을 위한 것으로, Python 버전과 C++ 버전을 포함합니다. 주로 GitHub 고수분들의 자료를 모아 놓았습니다. 마음에 드시길 바랍니다 C++ Python EXP POC 취약점 악용: 로컬 EXP 권한 상승：https://github.com/danigargu/CVE-2020-0796 로컬 EXE 권한 상승: https://github.com/f1tz/CVE-2020-0796-LPE-EXP POC 버전 권한 상승：...

chromebackdoor

VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go root@kitploit: python chromebackdoor.py user: root pass: toor KAL...

UnhookMe

UnhookMe - динамический разрешитель импортов с возможностью снятия хуков В эпоху навязчивых антивирусов и EDR, которые внедряют «горячие патчи» в запущенные процессы для улучшения своих возможностей наблюдения, современным злоумышленникам необходим надежный инструмент, чтобы обойти эти системы...

pip3line

Pip3line Codacy Badge Сборки для Linux / MacOS Сборки для Windows Утилита для манипуляции сырыми байтами, способная применять как хорошо известные, так и менее известные преобразования, быстрый бинарный поиск, перехват прокси-трафика и многое другое. Установка на Windows:...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

bst

Инструментарий для двоичных строк Краткое описание Инструментарий для работы с двоичными строками Binary String Toolkit, сокращённо BST — это довольно простая утилита для преобразования двоичных строк в различные форматы, подходящие для включения в исходный код, например, при разработке эксплойто...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

LACheck

LACheck Assemblage .NET C multithreadé pour l'énumération des privilèges administratifs locaux Arguments root@kitploit: ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Usage: LACheck.exe smb rpc...

Sharpmad

Sharpmad Version C de Powermad Ceci n'est pas encore complet et n'a pas été entièrement testé. Il manque également les éléments suivants : Invoke-DNSUpdate Get-KerberosAESKey Readme temporaire Module ADIDNS Sharpmad.exe ADIDNS -Action new -Node test Action| Description ---|--- AddACE| Ajouter un...

pafish

Pafish Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do. The project is free and open source; the code of all the anti-analysis techniques is publicly available. Pafish executables for...

ThunderShell

ThunderShell ThunderShell est un RAT en C qui communique via des requêtes HTTP. Tout le trafic réseau est chiffré à l'aide d'une deuxième couche de RC4 pour éviter l'interception SSL et contourner la détection réseau sur le système cible. RC4 est un chiffrement faible et est utilisé pour aider à...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

TeamViewer-dumper-in-CPP

TeamViewer-dumper-in-CPP Extrait l'ID, le mot de passe et les paramètres du compte TeamViewer depuis une instance en cours d'exécution en énumérant les fenêtres enfants. Compilation et prérequis 1. Compiler avec CL 2. cl TeamViewerDump.cpp 3. ou avec cl TeamViewerDump.cpp /EHsc 4. Prérequis 5...