antipwny

antipwny المؤلفون: Rohan Vazarkar, David Bitner نظام IDS/IPS قائم على المضيف مكتوب بلغة C، يستهدف حمولات Metasploit. التعليمات يتطلب AntiPwny إطار عمل .NET Framework 4.5، والذي يمكن الحصول عليه هنا. يتوفر مثبت غير متصل بالإنترنت هنا http://www.microsoft.com/en-us/download/details.aspx?id=40779 يم...

Terminator

Terminator : Générateur de charges utiles Metasploit Liste des charges utiles : Charges utiles binaires root@kitploit: 1 Android 2 Windows 3 Linux 4 Mac OS Charges utiles de script root@kitploit: 1 Python 2 Perl 3 Bash Charges utiles web root@kitploit: 1 ASP 2 JSP 3 War Chiffreurs root@kitploit: ...

avoidz

Avoidz v 1.3 root@kitploit: Author: Mascerano Bachir dev-labs إخلاء مسؤولية قانوني: root@kitploit: لا يتحمل المؤلف أي مسؤولية عن سوء استخدام هذه الأداة، تذكر أن هذا لأغراض تعليمية فقط. الوصف: root@kitploit: هذه الأداة تُنشئ باورشيل مشفر مع حمولات metasploit، وتحول قوالب C و C و py و go إلى ملفات...

Veil

Veil Veil Logo Veil 是一款旨在生成能绕过常见防病毒解决方案的 Metasploit 载荷的工具。 Veil 当前由 @ChrisTruncer 维护 软件要求： 官方支持的以下操作系统： Debian 8+ Kali Linux Rolling 2018.1+ 以下操作系统可能能够运行 Veil： Arch Linux Manjaro Linux BlackArch Linux Deepin 15+ Elementary Fedora 22+ Linux Mint Parrot Security Ubuntu 15.10+ Void Linux 安装 Kali 快速安...

Veil-Evasion

Veil-Evasion Veil-Evasion هي أداة مصممة لتوليد حمولات metasploit التي تتجاوز حلول مكافحة الفيروسات الشائعة. ملاحظة: يجب إعادة تشغيل ./setup/setup.sh بعد كل تحديث رئيسي للإصدار. إذا واجهت أي أخطاء رئيسية عند تشغيل Veil-Evasion، فجرّب أولاً إعادة تشغيل هذا السكربت لتثبيت أي حزم إضافية وتحديث ملف...

mjet

mjet Kit d'exploitation Java Management Extensions JMX de Mogwai Security mjet est un outil qui peut être utilisé pour protéger les services JMX configurés de manière non sécurisée. Il est basé sur l'article de blog "Exploiting JMX-RMI" de Braden Thomas/Accuvant...

discover

This is a collection of custom bash scripts used to automate various penetration testing tasks, including reconnaissance, scanning, enumeration, and malicious payload creation using Metasploit. The scripts are designed to be used with Kali Linux. The scripts are organized into several categories,...

fimap

fimap is a Python tool designed to find, prepare, audit, exploit, and even automatically Google for local and remote file inclusion LFI/RFI bugs in web applications. It can identify and exploit file inclusion bugs, including include, includeonce, require, and requireonce functions. The tool has a...

Metasploit weekly wrap-up

New module content 1 Metabase Setup Token RCE Authors: Maxwell Garrett, Shubham Shah, and h00die Type: Exploit Pull request: 18232 contributed by h00die Path: exploits/linux/http/metabasesetuptokenrce AttackerKB reference: CVE-2023-38646 Description: This adds a module for an unauthenticated RCE...

Exploitivator - Automate Metasploit Scanning And Exploitation

This has only been tested on Kali. It depends on the msfrpc module for Python, described in detail here: https://www.trustwave.com/Resources/SpiderLabs-Blog/Scripting-Metasploit-using-MSGRPC/ Install the necessary Kali packages and the PostgreSQL gem for Ruby: apt-get install postgresql libpq-dev...

Hackers Turn to OpenDocument Format to Avoid AV Detection

Attackers have a new obfuscation technique that uses the OpenDocument file format for sneaking payloads past antivirus software. Past macro-based attacks have relied on malware hitching a ride with .docx, .zip, .jar and many other file formats. But researchers at Cisco Talos said that because the...

FakeImageExploiter - Use a Fake image.jpg (hide known file extensions) to exploit targets

This module takes one existing image.jpg and one payload.ps1 input by user and builds a new payload agent.jpg.exe that if executed it will trigger the download of the 2 previous files stored into apache2 image.jpg + payload.ps1 and execute them. This module also changes the agent.exe Icon to matc...

Microsoft SQL Server Database Link Crawling Command Execution

This module can be used to crawl MS SQL Server database links and deploy Metasploit payloads through links configured with sysadmin privileges using a valid SQL Server Login. If you are attempting to obtain multiple reverse shells using this module we recommend setting the "DisablePayloadHandler"...