hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

TREVORproxy

TREVORproxy A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses! See the accompanying Blog Post for a fun rant and some cool demos! Note: If you're looking to defend against this...

LightsOut

LightsOut LightsOut will generate an obfuscated DLL that will disable AMSI & ETW while trying to evade AV. This is done by randomizing all WinAPI functions used, xor encoding strings, and utilizing basic sandbox checks. Mingw-w64 is used to compile the obfuscated C code into a DLL that can be...

Invoke-PSObfuscation

Invoke-PSObfuscation Traditional obfuscation techniques tend to add layers to encapsulate standing code, such as base64 or compression. These payloads do continue to have a varied degree of success, but they have become trivial to extract the intended payload and some launchers get detected often...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage git clone...

autodeauth

autodeauth A tool/service built to automatically deauth local networks Tested on Raspberry Pi OS and Kali Linux Setup $ chmod +x setup.sh $ sudo ./setup.sh This can be changed by editing /etc/systemd/system/autodeauth.service ? Enter your WiFi interface to use with the autodeauth service: wlan0...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

snapchat-map-scraper

Snapchat Story Downloader This program can search Snapchat's public Snap Map at multiple locations and download all stories for later investigation and categorization. A lot is unknown about how Snapchat decides which videos show up at which "point" on the map, so the scraper can also randomize t...

CodiMD <2.5.4 - Insecure Filename Randomization

CodiMD does not require valid authentication to access uploaded images or to upload new image data. An attacker who can determine an uploaded image's URL can gain unauthorised access to uploaded image data. Due to the insecure random filename generation in the underlying Formidable library, an...

Malleable-C2-Randomizer

Malleable-C2-Randomizer 이 스크립트는 메타언어를 사용하여 Cobalt Strike의 Malleable C2 프로필을 무작위화하여 시그니처 기반 탐지 컨트롤에 걸릴 가능성을 줄여줍니다. 간단히 말하면, 스크립트는 제공된 템플릿을 파싱하고, 변수를 제공된 또는 내장된 단어 목록에서 무작위 값으로 대체하며, c2lint 로 새 템플릿을 테스트한 후 c2lint 오류가 없는 경우 새로운 Malleable C2 프로필을 출력합니다. 이 스크립트와 호환되는 샘플 Malleable C2 프로필은 이 리포지토리의 Samp...

CVE-2019-2215

CVE-2019-2215 Andriod binder bug record.Just only test on emulator : ubuntu 22.04 | 4G | 4 cpus andriod studio Pixel2 | Andriod 10.0Q--Google Play Intel x86 Atom 64 System Image | API-29 ndk 21.0.6113669 origin/android-goldfish-4.14-dev | kernel version is 4.14.175 some important config options...

ps5-umtxdbg

メモ このバグは2020年12月上旬に発見された。発見者は私ではなく、fbsdを15分見ただけで即座にそれを見抜いた天才だ 🙇‍♂️。このC++実装は、ps5カーネルがヒープランダム化機能を追加した後に、エクスプロイトの信頼性を高める実験をしていた際に作られたものだ。 VMのセットアップ VMイメージを取得する wget http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/old-releases/VM-IMAGES/11.0-RELEASE/amd64/Latest/FreeBSD-11.0-RELEASE-amd64.vhd.xz...

F31

F31: Kali Linux 숨기기 F31은 Kali Linux를 강화하고 네트워크상에서의 노이즈를 최소화할 수 있게 해주는 bash 스크립트입니다. 네트워크 성능 문제를 피하기 위해 인프라에 미치는 영향을 최소화하는 것이 중요한 펜테스터나 레드팀 운영자에게 유용합니다. 이 도구가 완전한 SOC 회피를 보장하지는 않습니다. 네트워크 인프라는 각기 다르고, 모든 보안 분석 사례는 고유하기 때문입니다. F31의 주된 목표는 네트워크상에서의 노이즈를 최소화하는 것입니다. 면책 조항 이 글과 도구는 입문 성격을 가지며, 계약에 따라...

hide-me

Mac and hostname random changer hide-me Every time I was trying to do an Network Penetration Testing, I needed to do some steps to make sure I was hidden, put my interface down, change my mac address, change my hostname, putting interface back up, and restarting network-manager service, and when...

hawkopsec

HawkOpsec One-tap Linux OPSEC hardening & anonymity toolkit -0b0d10 HawkOpsec turns a pile of manual privacy commands into security modes you apply with one tap. Pick a mode — the tool starts Tor, configures DNS, randomizes your identity and hardens the kernel for you. Hit RESET and every change ...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2022_7006)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227006 advisory. OpenJDK: excessive memory allocation in X.509 certificate parsing Security, 8286533 CVE-2022-21626 OpenJDK: HttpServer no connection count limit Lightweigh...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_7000)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227000 advisory. OpenJDK: improper MultiByte conversion can lead to buffer overflow JGSS, 8286077 CVE-2022-21618 OpenJDK: excessive memory allocation in X.509 certificate...

Astra Linux – Vulnerability in Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ELF: fixed the double read of kernel.randomizevaspace. The ELF loader uses “randomizevaspace” twice. This is a sysctl setting that can be changed at any time; therefore, two reads could potentially access different values,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in the .notes section. When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the “startupxen” entry point. This information is used before booting...