71 matches found
xeca
xeca xeca es un proyecto que crea payloads de PowerShell cifrados con fines ofensivos. También es posible crear shellcode independiente de la posición a partir de archivos DLL. Nota: Coloca tu bypass de AMSI personalizado en src/assets/amsi-bypass.ps1. Tabla de Contenidos xeca Instalación Cómo...
hinge-command-control-c2
Using Hinge as a Command & Control Server Please see https://mattwie.se/hinge-command-control-c2...
DarkLoadLibrary
DarkLoadLibrary LoadLibrary para operaciones ofensivas. ¿Cómo funciona? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Uso root@kitploit: DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading from disk NULL, /...
shocker
Shocker Инструмент для поиска и эксплуатации серверов, уязвимых для Shellshock Ссылка: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Выпущен как open source компанией NCC Group Plc - https://www.nccgroup.trust/ Разработано: Tom Watson, tom dot watson at nccgroup dot trust...
ccat
Cloud Container Attack Tool CCAT ☁️🐈...
Browser-ExternalC2
Browser-EC2...
kubesploit
Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...
Powermad
PowerShell MachineAccountQuota and DNS exploit tools Wiki https://github.com/Kevin-Robertson/Powermad/wiki Blog Post Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS Functions MachineAccountQuota Functions DNS Functions Dynamic Updates Functions ADIDNS Functions Miscellaneo...
SwiftBelt
SwiftBelt Acerca de SwiftBelt es un enumerador de macOS inspirado en la herramienta de enumeración Seatbelt basada en Windows de @harmjoy. SwiftBelt no utiliza ninguna utilidad de línea de comandos y en su lugar usa código Swift aprovechando el framework Cocoa, las bibliotecas Foundation, las...
RemoteKeyStrokes
RemoteKeyStrokes Un script para automatizar pulsaciones de teclado a través de una sesión activa de escritorio remoto que asiste a operadores ofensivos en combinación con técnicas de living off the land. Todo el crédito va para nopernik por hacerlo posible, así que tomé la iniciativa de mejorarlo...
tplmap
Tplmap Questo progetto non è più mantenuto. Sono felice di unire nuove PR purché non rompano la test suite. Tplmap assiste nello sfruttamento di vulnerabilità di Code Injection e Server-Side Template Injection con una serie di tecniche di escape dalla sandbox per ottenere accesso al sistema...
gpblib
GPBLib GPBLib contiene il codice comune utilizzato dai progetti GroupPolicyBackdoor, OUned e GPOddity per la manipolazione delle GPO. La migrazione degli strumenti all'uso della presente libreria è ancora in corso...
SelectMyParent
Was ist das? Dies ist ein Projekt für Parent-Process-Spoofing. Verwendung Schritt 1: Wählen Sie einen übergeordneten Prozess aus und merken Sie sich die PID. Schritt 2: Führen Sie den folgenden Befehl aus, um Parent-Process-Spoofing umzusetzen. root@kitploit: SelectMyParent.exe notepad 928 Schrit...
exploit
Exploit Uno strumento di hacking offensivo Per Iniziare Questo è uno strumento o programma di hacking codificato e costruito per assistere un hacker nell'hacking e nell'esecuzione di exploit. Per domande Telegram: https://t.me/bitgodhack Email: [email protected] Requisiti di installazione su...
Offensive Tool Determination Strategy R.I.D.D.L.E. + (C)
Intentional threats are a major risk factor related to vulnerabilities in critical infrastructure assets, and an accurate risk assessment is necessary to analyze threats, assess vulnerabilities, and evaluate potential impacts on assets and systems. This research proposes a methodology that can be...
Xss-Wordlist
It is an offensive tool for web application security testing. Th...
Zero-Days
It is an offensive tool for Windows. This repository appears to...
dzzoffice_upload
It is an offensive tool for web application exploitation. The re...