TheFatRat

TheFatRat A Massive Exploiting Tool TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus...

CmdLineSpoofer

Command Line Spoofer An example of using C to inject a meterpreter shell, whilst spoofing the command line. The command line is stored in the Process Environment Block, is logged when a new process starts, and is displayed in tools such as Process Hacker and Task Manager. Introduction This code i...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS connections Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam develop @2017 Description: MeterpreterParanoidMode.sh allows users to secure your staged/stageless...

CVE-2017-8570

Usage: After downloading the script, modify attackip to the IP of Kali, LPORT to the port that msf will listen on, and DIR to any empty directory Give the script 777 permissions chmod 777 auto Then run the script ./auto Then find the Invoice.ppsx file in the DIR+Office8570 directory and send it t...

PasteJacker

PasteJacker The main purpose of the tool is automating PasteJacking/Clipboard poisoning/whatever you name it attack with collecting all the known tricks used in this attack in one place and one automated job as after searching I found there's no tool doing this job the right way 😄 Now because thi...

thorse

THorse THorse is a RAT Remote Administrator Trojan Generator for Windows/Linux systems written in Python 3. This small python script can do really awesome work. Disclaimer :computer: This project was created only for good purposes and personal use. THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRAN...

metasploit-javapayload

This repository has been merged into metasploit-payloads Please note that this repository has been merged into a unified repository for meterpreters: https://github.com/rapid7/metasploit-payloads The history has been preserved, along with prehistory from metasploit-framwork:...

metasploit-payloads

metasploit-payloads Appveyor build status: This is a unified repository for different Metasploit Framework payloads, which merges these repositories: C Windows Meterpreter Java and Android Meterpreter and Payloads Python and PHP Meterpreter An alternate cross-platform C Meterpreter, called Mettle...

Shellcode-Injection-Techniques

Shellcode Injection Techniques A collection of C shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Note: The project is not intended to be used as-is. If you are going to use...

EvilAbigail

Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

payloadgenerator

PGen PGen is a tool written in Bash to generate the most common Meterpreter payloads via MSFvenom, part of the Metasploit framework. About PGen is a wrapper around MSFvenom that provides a more user friendly experience to generate multiple types of payloads. Our intent is to make the experience a...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

Auto-PostXploit

Auto-PostXploit Windows Auto Post Exploitation - For ReD Team https://github.com/emilyanncr/Windows-Post-Exploitation/ Download : wget https://raw.githubusercontent.com/BehzaDMagzer/Auto-PostXploit/master/Auto-PostXploit.exe Usage : meterpreter upload %path%/Auto-PostXploit.exe...

netrat

netrat Dependency Status Damn easy multiplatform Node.js RAT generator An easy tool to generate configurable backdoors that runs on Windows, Mac and Linux. Shells are upgradable to Meterpreter! Install $ npm install -g netrat Usage $ netrat It will start the building procedure that lets you...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 Exploit toolkit CVE-2017-0199 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victi...