DllNotificationInjection

DllNotificationInjection Main Contributors Description DllNotificationInection is a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. An accompanying blog post with more details is available here:...

raven

Raven Currently is not being maintained Raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin. Disclaimer Please do not use this program to do stupid things. The author does not keep any responsibility of...

area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return. Getting started · Playbooks · CLI · Architecture ·...

exe2powershell

exe2powershell exe2powershell - exe2bat reborn for modern Windows exe2bat reborn in exe2powershell for modern Windows exe2powershell is used to convert any binary file .exe to a BAT file. The resulting BAT file contains only "echo" command and finally a powershell command to re-create the origina...

pybof

PyBOF Python을 통한 Beacon Object 파일 실행 BOF의 인메모리 로딩 및 실행 PyBOF는 Python3가 bytes를 통해 Beacon Object Files를 로드하고 Python 인터프리터에서 대상 BOF 함수를 실행할 수 있게 해줍니다. 기본 사용법 인자가 필요 없는 간단한 BOF 실행 data = openr'c:\path\to\example.o', 'rb'.read bof.rundata 원시 문자열 인자를 BOF에 전달 data = openr'c:\path\to\example.o', 'rb'.rea...

CollaRE

CollaRE v1.4 소개 CollaRE는 협업 리버스 엔지니어링을 위한 도구로, 프로젝트 중에 두 개 이상의 도구를 사용해야 하는 팀이 별도의 위치에 파일을 공유할 필요 없이 협업할 수 있도록 하는 것을 목표로 합니다. 또한 매우 간단한 사용자 관리를 포함하므로 서로 다른 팀이 서로 다른 프로젝트에서 작업하는 다중 프로젝트 서버로 사용할 수 있습니다. 이 도구의 백엔드는 Docker에서 실행되는 nginx 앞단을 둔 간단한 Flask app으로, 관련 데이터를 담고 있는 파일 및 JSON 기반 매니페스트와 함께 동작합니다...

revsync

revsync IDA Pro, Binary Ninja 및 Vivisect용 실시간 동기화 플러그인 동기화 항목: 주석 심볼 이름 스택 변수 이름 구조체 코드 커버리지블록을 보는 데 소요된 시간 IDA Pro 설치 먼저 IDA 데이터 디렉터리에 클론하세요: Windows: %APPDATA%\Hex-Rays\IDA Pro Mac/Linux: /.idapro 그런 다음: 위 디렉터리에 idapythonrc.py 파일을 만들고 import revsync를 추가하세요. config.json.template을 config.json으로...

centipede

Centipede - 분산 퍼징 엔진. 작업 진행 중Work-in-progress. 왜 Centipede인가 왜 아닐까? 우리는 현재 매우 크고 매우 느린 타깃들을 퍼징하려고 시도 중이며, 이러한 타깃에는 libFuzzer, AFL 등이 반드시 잘 확장되지는 않는다. 우리의 동기 부여 사례 중 하나는 SiliFuzz를 참조하라. Centipede를 작업하면서 우리는 기존 퍼징 엔진들이 시도하지 않는 대규모 차등differential 퍼징의 새로운 접근 방식을 실험할 계획이다. 주요 특징: libFuzzer 기반 퍼즈 타깃을 별...

GoGhost

GoGhost GoGhost is a High Performance, lightweight, portable Open Source tool for mass SMBGhost Scan. Installation You can download Windows Binary or Linux Binary. Alternatively, GoGhost uses native Golang libraries so the line above would be fine to compile it: go build GoGhost.go Usage Options...

protobuf-inspector

protobuf-inspector Simple program that can parse Google Protobuf encoded blobs version 2 or 3 without knowing their accompanying definition. It will print a nice, colored representation of their contents. Example: As you can see, the field names are obviously lost, together with some high-level...

Grok-backdoor

Grok-backdoor Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the C&C communication. Ngrok-backdoor can generate Windows, Linux and Mac binaries using Pyinstaller. How it works: Ngrok exposes local servers behind NATs and firewalls to the public internet over a secure...

honeyLambda

Serverless trap honeyλ - a simple serverless application designed to create and monitor URL honeytokens, on top of AWS Lambda and Amazon API Gateway Slack notifications Email and SMS alerts Load config from local file or Amazon S3 Customize the HTTP response for each token Threat Intelligence...

pymap

pymap — SQL injection discovery & exploitation toolkit Two co...

SharpSploitConsole

SharpSploitConsole Console Application designed to interact with SharpSploit released by @cobbrio https://github.com/cobbr/SharpSploit SharpSploit is a tool written by @cobbrio that combines many techniques/C code from the infosec community and combines it into one sweet DLL. It's awesome so chec...

Kam1n0-Community

What Is Kam1n0 v2? Kam1n0 v2.x is a scalable assembly management and analysis platform. It allows a user to first index a large collection of binaries into different repositories and provide different analytic services such as clone search and classification. It supports multi-tenancy access and...

garble

garble go install mvdan.cc/garble@latest or @master Obfuscate Go code by wrapping the Go toolchain. Requires Go 1.27 or later. garble build build flags packages The tool also supports garble test to run tests with obfuscated code, garble run to obfuscate and execute simple programs, garble revers...

CVE-2020-13957

Apache Solr RCE CVE-2020-13957 Docker 데모 Mac 데모 NVD CVE-2020-13957 설명 NVD CVE-2020-13957 Apache Solr 6.6.06.6.6, 7.0.07.7.3, 8.0.08.6.2 버전은 인증/권한 부여 없이 API를 통해 업로드되는 ConfigSet에서 원격 코드 실행에 사용될 수 있는 일부 위험한 기능의 구성을 차단합니다. 이러한 기능을 방지하기 위한 검사는 UPLOAD/CREATE 액션을 조합하여 우회할 수 있습니다. Docker PoC 환경 설정 1...

eyeballer

Eyeballer Give those screenshots of yours a quick eyeballing. Eyeballer is meant for large-scope network penetration tests where you need to find "interesting" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal EyeWitness or GoWitness and th...

of-CORS

of-CORS of-CORS is Truffle Security's tool suite for identifying and exploiting CORS misconfigurations on the internal networks of bug bounty targets using typosquatting. You can read more here https://trufflesecurity.com/blog/of-CORS How Does it Work?? of-CORS is a Python3 web application built ...

grap

grap: define and match graph patterns within binaries https://github.com/QuoSecGmbH/grap grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them. Patterns are user-defined graphs with...