ARP-poisoning-packet-sniffer

ARP Poisoning - Packet Sniffer Two scripts written to perform ARP poisoning on target computers on the same network and to monitor network traffic. The arpspoofy.py script is used to perform ARP poisoning on a target computer on the same network. While the arpspoofy.py script performs ARP poisoni...

Inveigh

Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers. This repo contains the primary C version as well as the legacy PowerShell version. Overview Inveigh conducts spoofing attacks and hash/credential captures through both packet sniffing and protoc...

CredSniper

CredSniper Overview Benefits Basic Usage Installation Screenshots Gmail Module Maintainer Contributing Overview Easily launch a new phishing site fully presented with SSL and capture credentials along with 2FA tokens using CredSniper. The API provides secure access to the currently captured...

Koh

Koh Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, s...

ChromeAlone

ChromeAlone - A Browser C2 Framework What does this get me? ChromeAlone is a browser implant that can be used in place of conventional implants like Cobalt Strike or Meterpreter. This repo provides a simple build process that will generate a management console, deploy infrastructure, and create a...

Responder

Responder Responder is a LLMNR, NBT-NS, and MDNS poisoner with built-in rogue authentication servers for HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS, and more. It supports NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP, and various authentication methods across 15+ protocols. Table of Contents...

ESP-RFID-Tool

ESP-RFID-Tool By Corey Harding Official website: www.rfid-tool.com April Brother is currently manufacturing this hardware and it can be purchased direct from China from their Official Store: https://blog.aprbrother.com/product/esp-rfid-tool AliExpress Store:...

DLLPasswordFilterImplant

DLLPasswordFilterImplant DLLPasswordFilterImplant is a custom password filter DLL that allows the capture of a user's credentials. Each password change event on a domain will trigger the registered DLL in order to exfiltrate the username and new password value prior successfully changing it in th...

net-creds

Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Screenshots --- Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

fluxion

Fluxion is the future of MITM WPA attacks Fluxion is a remake of linset by vk496 with hopefully less bugs and more functionality. It's compatible with the latest release of Kali rolling. Latest builds stable and beta can be found here here...

wifiphisher

概要...

pyrdp

PyRDP PyRDP は、Python で書かれた Remote Desktop Protocol RDP Monster-in-the-Middle MITM ツールおよびライブラリです。 以下のツールを備えています。 RDP モンスター・イン・ザ・ミドル 接続時に使用される平文の認証情報または NetNTLM ハッシュをログに記録 クリップボードにコピーされたデータを盗み取る ネットワークを介して転送されたファイルのコピーを保存 バックグラウンドで共有ドライブをクロールし、ローカルに保存 接続のリプレイを保存して、後で確認可能 新しい接続時にコンソールコマンドまたは...

thief_raccoon

Thief Raccoon - ログインフィッシングツール Thief Raccoonは、教育目的で設計されたツールであり、さまざまなオペレーティングシステム上でフィッシング攻撃がどのように実行されるかを示します。このツールは、サイバーセキュリティの脅威に対する認識を高め、2FAやパスワード管理などのセキュリティ対策の重要性をユーザーが理解するのに役立つことを目的としています。 機能 Windows 10、Windows 11、Windows XP、Windows Server、Ubuntu、Ubuntu Server、macOS向けのフィッシングシミュレーション。...

lab-SMB-responder-CVE-2024-21413

SMB Lab + Responder CVE-2024-21413 🎯 Objective This project aimed to study the CVE-2024-21413 MonikerLink vulnerability, exploring how the SMB/NTLM protocol can be abused for credential capture. Even after the official Microsoft patch, the lab shows that the concept remains valid in internal...

chuckle

Chuckle - 一个自动化的 SMB 中继脚本。 Chuckle 的运行需要一些工具： SMBRelayX.py Veil（来自 git 的最新版本） Responder（Chuckle 会检测你正在使用的版本。） Nmap Nbtscan（unixwiz） MSFconsole 使用起来相当简单，以 root 身份运行或使用 sudo： sudo ./chuckle.sh 稍等片刻，或者诱使特权用户向您进行身份验证，您就能在目标机器上获得一个 shell。运行此脚本时请务必小心，切勿在未经许可的网络上运行。 感谢 theguly 所做的补充。...

CVE-2026-92139

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted...

CVE-2026-92139

Jenkins Bitbucket Push and Pull Request Plugin (4.0.1 and earlier) trusts values in incoming webhook payloads, including certain URLs, and uses the plugin's configured Bitbucket credentials to connect to those attacker-supplied URLs. An unauthenticated attacker can send a crafted webhook to captu...

SSHintel

SSHintel — 轻量级 SSH 蜜罐 SSHintel 是一个使用 Python 和 Paramiko 构建的轻量级 SSH 蜜罐。它模拟一个假的 Linux shell，用于记录未经授权的访问尝试、捕获凭据，并在受控环境中分析攻击者的行为。 🔧 功能特性 记录 SSH 登录尝试，包括 IP、用户名和密码 提供一个模拟的 Linux shell（一个假的、内存中的环境） 支持广泛的侦察和导航命令（ls、cd、pwd、cat、echo、grep、find、tree、head、tail、wc、stat、ps、df、free、env、id、whoami 等） 可选的 --tarpit...

CVE-2026-49364

An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommend...