Wireshark

Wireshark Malware Analysis Description This lab I analyzed a known malicious packet capture on the exploit Log4J. I begun my investigation with the same playbook I use for packet capture analysis, which is to examine the statistics and see how many and how much endpoints are communicating. Notici...

PuttyRider

PuttyRider Hijack Putty sessions in order to sniff conversation and inject Linux commands. Download PuttyRider-bin.zip Documentation Defcamp 2014 presentation - pdf Defcamp 2014 presentation - video Examples List existing Putty processes and their status injected / not injected PuttyRider.exe -l...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...

CVE-2021-4044

SSL Checker Script This repository contains a Python script that checks the OpenSSL version on your system and tests SSL/TLS connections to a user-provided website. The script is designed to identify whether the system is affected by CVE-2021-4044 and to test the handling of SSL errors during the...

mediator

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...

powershell-reverse-tcp

PowerShell Reverse TCP PowerShell scripts for communicating with a remote host. Remote host will have a full control over the client and all the underlying system commands. Check shells based on: Invoke-Expression PowerShell command here, process pipes here. Tested with PowerShell v5.1.19041.2673...

KSMBDrain

Overview Proof-of-Concept exploit for KSMBDrain CVE-2025-38501. It can remotely exhaust the KSMBD server's connection limit. Details A remote attacker can exhaust a KSMBD server’s maximum connection limit by performing a TCP 3-way handshake and then not responding to further packets. By default,...

ReverseSock5Proxy

Reverse TCP Sock5 Proxy A tiny Reverse Sock5 Proxy Server The Server GUI Built with ImGui :V U can download a prebuilt from Releases. Build You need gcc version 12+ recommended one for windows Conan Package Manager And run any script from the scripts folder, depend on your needs :V Client/Agent...

CVE-2025-24054-PoC

CVE-2025-24054 PoC A simple Proof of Concept for CVE-2025-24054 – Windows Library .library-ms NTLM Hash Disclosure Vulnerability. ⚠️ For Educational and Authorized Lab Use Only Description CVE-2025-24054 allows an attacker to force a Windows system to leak the victim's Net-NTLMv2 hash by using a...

easyssh

EasySSH The SSH connection manager to make your life easier. Looking for maintainers! A complete, efficient and easy-to-use manager. Create and edit connections, groups, customize the terminal, with multiple instances of the same connection. Features Manage connections and groups Customize termin...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. Features Scans URLs for a...

CVE-2022-33980

CVE-2022-33980 CVE Apache Commons RCE can use url,dns,script key-words to connect any server...

fcn-

fcn free connect your private network from anywhere 1. What is fcn fcnfree connect is a foolproof one-click tool for accessing private networks, consisting of the server side and the client side fcn uses fcn public data servers and data encryption technology to virtually connect user clients to...

Python-Rootkit

python-rootkit This is a full undetectable python RAT which can bypass almost all antivirus and open a backdoor inside any windows machine which will establish a reverse https Metasploit connection to your listening machine. ViRu5 life cycle Bypass all anti-virus. Inject a malicius powershell...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

AnySniff

💀AnySniff AnySniff is a tool for monitoring TCP connections of processes like AnyDesk on Windows. It uses the CVE-2024-52940 vulnerability to track open connections and log IPs, ports, and other relevant details. ⚙Features Monitors TCP connections of targeted processes e.g., AnyDesk. Logs IP...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

ettercap

A suite for man in the middle attacks Copyright 2001-Current The Ettercap Dev Team INTRODUCTION Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive...

revsuit

RevSuit - A Flexible and Powerful Reverse Connection Platform English ｜简体中文 Overview RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration. It currently supports HTTP, DNS, RMI, LDAP, MySQL and FTP protocols. Flexible: 1...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...