malduck

🦆 Malduck Installation ⚙️ | Docs 📚 Malduck is your ducky companion in malware analysis journeys. It is mostly based on Roach project, which derives many concepts from mlib library created by Maciej Kotowicz. The purpose of fork was to make Roach independent from Cuckoo Sandbox project, but still...

Cisco-Smart-Exploit

Cisco-Smart-Exploit Cisco SmartInstall Exploit CVE-2018-0171 Inspired from C. Papathanasiou PoC This Python 3 script uses port 4786 on a Cisco device running SmartInstall to exploit CVE-2018-0171. With the use of this exploit, an attacker can craft a payload, send it to the Cisco device, and then...

smoke_conf_extract

Smoke Config Extraction Overview This project aims to extrct configurations from smokeloader samples starting at the initial stage. I was set on doing this statically so had to rely on things like Unicorn to bypass some of the more complicated components. Regardless of how this extraction works f...

raccoon_config

raccoonconfig Scans a list of raccoon servers from Tria.ge and extracts the config as JSON. If you like, it can also automatically send follow-up malware extracted from the Raccoon config to Tria.ge API key required Resources: Logo: https://www.deviantart.com/snatti89/art/193-365-Mugshot-58870035...

Asyncrat-Venom-Dcrat-Config-Extractor

Asyncrat-Venom-Dcrat-Config-Extractor Static Config Extractor for Asyncrat/Dcrat/VenomRat Utilises dnlib to locate encrypted Config data and associated Encryption values. Values are decrypted in the script without emulating or executing malware code Assumes config lies under the Client.Settings...

melting-cobalt

melting-cobalt 👀 Cobalt Strike 비콘을 사냥/채굴하고 나중에 인덱싱을 위해 비콘 구성을 "축소"하는 도구입니다. 사냥은 SecurityTrails, Shodan, ZoomEye와 같은 서비스를 사용하여 광범위하고 인터넷 전체를 대상으로 하거나 IP 목록을 사용할 수 있습니다. 시작하기 1. 설치 melting-cobalt 2. 사냥을 시작하려면 구성에서 토큰을 설정하세요 3. 비콘을 채굴하여 축소를 시작하세요 4. 결과 확인 cat results.json | jq 📺 데모 설치 요구 사항:...

Exploit for Improper Input Validation in Cisco Ios

Cisco-Smart-Exploit Cisco SmartInstall Exploit CVE-2018-0171...