Terminator

Terminator : Metasploit Payload Generator 载荷列表 : 二进制载荷 1 Android 2 Windows 3 Linux 4 Mac OS 脚本载荷 1 Python 2 Perl 3 Bash Web 载荷 1 ASP 2 JSP 3 War 加密器 1 APK 加密器 2 Python 加密器 作者对滥用此工具不承担任何责任， 请记住，未经事先同意攻击目标是非法的，并将受到法律制裁。...

avoidz

Avoidz v 1.3 作者: Mascerano Bachir dev-labs 法律声明: 作者不对该工具的滥用承担任何责任， 请记住，这仅用于教育目的。 描述: 该工具生成编码的 PowerShell 与 Metasploit 载荷，将 C、C、py、go 模板转换为 EXE 文件 截图: 依赖项 : 1 - metasploit-framework 2 - xterm 3 - MinGW32 4 - Monodevelop 5 - Wine 6 - Python.exe v 2.7 7 - Golang 下载/配置/用法: 1º - 从 GitHub 下载工具 git clon...

antipwny

antipwny 作者：Rohan Vazarkar, David Bitner 一个基于主机的入侵检测/入侵防御系统（IDS/IPS），使用 C 编写，专门针对 Metasploit Payloads。 说明 AntiPwny 需要 .NET Framework 4.5，可从此处获取。 离线安装程序可在此处下载。 预编译的二进制文件位于根目录的 exe 文件夹中。请确保使用正确的平台，否则会出错！AntiPwny 运行需要包含的 DLL 文件。 AntiPwny 使用 Visual Studio 2012 Professional 编译。如需自行编译，请检出源代码并针对目标平台进行编译...

mjet

mjet Mogwai Security Java Management Extensions JMX Exploitation Toolkit mjet es una herramienta que puede utilizarse para proteger servicios JMX configurados de forma insegura. Se basa en el artículo "Exploiting JMX-RMI" de Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi"...

Veil-Evasion

Veil-Evasion Veil-Evasion 是一款旨在生成绕过常见杀毒软件的 Metasploit 有效载荷的工具。 注意：每次主要版本更新后，都应重新运行 ./setup/setup.sh。如果在运行 Veil-Evasion 时遇到任何重大错误，请首先尝试重新运行此脚本以安装额外的包并更新公共配置文件。 Veil-Evasion 目前由 @ChrisTruncer、@TheMightyShiv、@HarmJ0y 积极维护。 感谢： @jasonjfrank @mjmaley @davidpmcguire 软件要求： Linux 1. 使用 Kali x86 系统，所有依赖项已...

Veil

Veil Veil Logo Veil 是一款旨在生成能绕过常见防病毒解决方案的 Metasploit 载荷的工具。 Veil 当前由 @ChrisTruncer 维护 软件要求： 官方支持的以下操作系统： Debian 8+ Kali Linux Rolling 2018.1+ 以下操作系统可能能够运行 Veil： Arch Linux Manjaro Linux BlackArch Linux Deepin 15+ Elementary Fedora 22+ Linux Mint Parrot Security Ubuntu 15.10+ Void Linux 安装 Kali 快速安...

discover

This is a collection of custom bash scripts used to automate various penetration testing tasks, including reconnaissance, scanning, enumeration, and malicious payload creation using Metasploit. The scripts are designed to be used with Kali Linux. The scripts are organized into several categories,...

fimap

fimap is a Python tool designed to find, prepare, audit, exploit, and even automatically Google for local and remote file inclusion LFI/RFI bugs in web applications. It can identify and exploit file inclusion bugs, including include, includeonce, require, and requireonce functions. The tool has a...

Metasploit weekly wrap-up

New module content 1 Metabase Setup Token RCE Authors: Maxwell Garrett, Shubham Shah, and h00die Type: Exploit Pull request: 18232 contributed by h00die Path: exploits/linux/http/metabasesetuptokenrce AttackerKB reference: CVE-2023-38646 Description: This adds a module for an unauthenticated RCE...

Exploitivator - Automate Metasploit Scanning And Exploitation

This has only been tested on Kali. It depends on the msfrpc module for Python, described in detail here: https://www.trustwave.com/Resources/SpiderLabs-Blog/Scripting-Metasploit-using-MSGRPC/ Install the necessary Kali packages and the PostgreSQL gem for Ruby: apt-get install postgresql libpq-dev...

Hackers Turn to OpenDocument Format to Avoid AV Detection

Attackers have a new obfuscation technique that uses the OpenDocument file format for sneaking payloads past antivirus software. Past macro-based attacks have relied on malware hitching a ride with .docx, .zip, .jar and many other file formats. But researchers at Cisco Talos said that because the...

FakeImageExploiter - Use a Fake image.jpg (hide known file extensions) to exploit targets

This module takes one existing image.jpg and one payload.ps1 input by user and builds a new payload agent.jpg.exe that if executed it will trigger the download of the 2 previous files stored into apache2 image.jpg + payload.ps1 and execute them. This module also changes the agent.exe Icon to matc...

Microsoft SQL Server Database Link Crawling Command Execution

This module can be used to crawl MS SQL Server database links and deploy Metasploit payloads through links configured with sysadmin privileges using a valid SQL Server Login. If you are attempting to obtain multiple reverse shells using this module we recommend setting the "DisablePayloadHandler"...