wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

pretender

pretender Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing pretender is a tool developed by RedTeam Pentesting to obtain machine-in-the-middle positions via spoofed local name resolution and DHCPv6 DNS takeover attacks. pretender...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnérabilité critique de la chaîne d'approvisionnement dans le mécanisme de mise à jour de NiceHash QuickMiner Auteur : Prince T Philip Rôle : Chercheur en sécurité indépendant Gravité : CRITIQUE — CVSS 9.8 Impact : Exécution de code à distance / Compromission de la chaîne...

poodle-attack-sandbox

poodle-attack-sandbox Aperçu Ce code est le code de test pour POODLE CVE-2014-3566. POODLE signifie « Padding Oracle On Downgraded Legacy Encryption » et est une vulnérabilité de SSLv3.0. Avertissement Si vous utilisez ce code pour mener une attaque, vous risquez d'être arrêté par les autorités...

mitm

mitm A simple yet effective python3 script to perform DNS spoofing via ARP poisoning Installation adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py Demo Outcome Miscellaneous...

libsrtp

Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...

MemorizingTrustManager

MemorizingTrustManager - поддержка приватных облаков для вашего приложения MemorizingTrustManager MTM — это проект, позволяющий сделать использование SSL на Android более безопасным и осмысленным. При обнаружении неизвестного SSL-сертификата он спрашивает пользователя, принять ли сертификат...

sslsplit

SSLsplit - Interception transparente SSL/TLS https://www.roe.ch/SSLsplit Aperçu SSLsplit est un outil pour les attaques de type homme-du-milieu contre les connexions réseau chiffrées SSL/TLS. Il est conçu pour être utile en forensique réseau, analyse de sécurité d'applications et tests d'intrusio...

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

evilgophish

Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...

netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

amt_auth_bypass_poc

Exemple de contournement de l'authentification Intel AMT Ceci est un code de preuve de concept qui démontre l'exploitation de la vulnérabilité CVE-2017-5689. Il s'agit essentiellement d'un script mitmproxy qui efface simplement le champ "response" d'un en-tête Authorization. Exemple d'utilisation...

IotShark

cs219-f19-final-project IoTShark This is our final project for CS 219 for the Fall 2019 quarter. IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can...

nili

Nili Nili est un outil pour le scan réseau, l'homme du milieu Man in the Middle, la rétro-ingénierie de protocole et le fuzzing. Prérequis Python - Langage de programmation Python Scapy - Programme interactif de manipulation de paquets Netzob - Rétro-ingénierie de protocole, modélisation et...

evilginx2

Evilginx 3.0 Evilginx — это фреймворк для атак типа «человек посередине», используемый для фишинга учетных данных для входа вместе с сессионными cookie, что, в свою очередь, позволяет обходить защиту двухфакторной аутентификации. Этот инструмент является преемником Evilginx, выпущенного в 2017...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

StreamDivert

StreamDivert StreamDivert is a tool to man-in-the-middle or relay in and outgoing network connections on a system. It has the ability to, for example, relay all incoming SMB connections to port 445 to another server, or only relay specific incoming SMB connections from a specific set of source IP...