autoharness

AutoHarness Creado por Akshat Parikh ¿Qué es esta herramienta? AutoHarness es una herramienta que genera automáticamente harnesses de fuzzing para ti. Esta idea surge de un problema concurrente en el fuzzing de bases de código hoy en día: las bases de código grandes tienen miles de funciones y...

Andromeda

Andromeda hace que el trabajo inicial de ingeniería inversa de aplicaciones Android sea un poco más rápido y sencillo. Comparado con otras alternativas, está escrito en C/C++ y tiene una ventaja de rendimiento notable. DEMOSTRACIÓN La herramienta está en su etapa temprana de desarrollo Compilació...

GoAT

GoAT Golang Advanced Trojan is a trojan created in Go, using Twitter as a the C&C server. GoAT has some very unique and impressive capabilities, including multithreaded command execution and a sophisticated self defence rootkit module written in C. If you're not familiar with malware, please do n...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

avcleaner

avcleaner アンチウイルス回避のためのC/C++ソース難読化ツール ブログ記事 実装はかなり複雑であり、ソフトウェア開発におけるこの分野は一般向けに文書化されることは稀です。そのため、各設計上の選択を詳細に説明し、LLVM APIを扱う際の注意点を解説したブログ記事が用意されています。 https://blog.scrt.ch/2020/06/19/engineering-antivirus-evasion/ https://blog.scrt.ch/2020/07/15/engineering-antivirus-evasion-part-ii/ ビルド...

avcleaner

avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...

malcom

Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...

my-little-honeypot

my-little-honeypot Description This repository aims to show how easy it is to code a telnet honeypot in order to recovering IOT malwares, and thus, active Command & Control. This code has been released espacially because of the conference I gave at the INSHACK event in Lyon, France on April 6th...

squidmagic

Squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. Install dependencies root@kitploit: pip install -r requirements.txt Usage root@kitploit: python squidmagic.py...

botnet-hackpack

シンプルなC&Cボットネット このハックパックでは、ボットネットの基本的な特徴を実装するための基礎的なフレームワークを順を追って説明します。C言語を扱った経験があると役立つかもしれません。このチュートリアルが気に入ったら、このリポジトリにスターを付けてください！ 注意:...

fuzzing

libfuzzer-workshop Materials of "Modern fuzzing of C/C++ Projects" workshop. The first version of the workshop had been presented at ZeroNights'16 security conference. Disclaimer This workshop was originally developed in 2016. As of today 2021 and beyond, the practical side of the workshop might ...

c-cpp_CVE-2018-17229

This repository does not have a README...

code-shield

protocol-remediator An MVP that normalizes vulnerability findings in C/C++ protocol/platform code into reproducible evidence and validates candidate patches in isolated copies. code-shield was a working name with a confirmed name-collision risk, so a neutral internal name is used for the public...

SILVERPICK

SILVERPICK VERSION v1.1 BRIEF Project SILVERPICK is a Windows User-Mode Shellcode Development Framework WUMSDF whose sole purpose is to empower capability developers to build Position Independent Code PIC blobs for Windows x64 using C/C++ in an easy manner so as to reduce the development costs of...

LeetObfuscator

LeetObfuscator root@kitploit: ██╗ ███████╗███████╗████████╗ ██║ ██╔════╝██╔════╝╚══██╔══╝ ██║ █████╗ █████╗ ██║ ██║ ██╔══╝ ██╔══╝ ██║ ███████╗███████╗███████╗ ██║ ╚══════╝╚══════╝╚══════╝ ╚═╝ ██████╗ ██████╗ ███████╗██╗ ██╗███████╗ ██████╗ █████╗ ████████╗ ██████╗ ██████╗...

fil-c

Fil-C 0.684 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

UTopia

Einführung UTopia ist ein Tool zur automatischen Generierung von Fuzz-Treibern aus Unit-Tests. UTopia ermöglicht es Entwicklern, Fuzzing durchzuführen, ohne spezielle Kenntnisse über das Schreiben von Fuzzern zu haben. Selbst Entwickler, die mit Fuzzing vertraut sind, können erheblich Zeit sparen...

chromebackdoor

VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go root@kitploit: python chromebackdoor.py user: root pass: toor KAL...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...