MESH

DOCUMENTACIÓN | BARGHEST MESH es una herramienta de red, para apoyar la adquisición forense lógica remota en dispositivos móviles MESH proporciona a los analistas una ruta directa y cifrada hacia dispositivos móviles para depuración inalámbrica, monitoreo de red y adquisición forense, incluso...

dnscat2

참고: .zip 다운로드의 비밀번호는 모두 "password" 입니다! 소개 dnscat2에 오신 것을 환영합니다. 당신을 아프게 하거나 죽이지 않는 DNS 터널입니다! 이 도구는 DNS 프로토콜을 통해 암호화된 명령 및 제어C&C 채널을 생성하도록 설계되었습니다. 이는 거의 모든 네트워크에서 효과적인 터널입니다. 이 README 파일에는 시작하고 실행하는 데 필요한 모든 것이 포함되어 있습니다! 프로토콜, 코드 구조, 향후 계획 또는 기타 난해한 내용에 대해 더 깊이 알고 싶다면 doc/ 폴더를 확인하세요. 라이선스 이것은...

dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

AnonX

NOTA El script AnonX se basaba en la API pública de WeTransfer y dejó de funcionar tres semanas después de su lanzamiento. “Todo lo bueno tiene que llegar a su fin, así que con el corazón apesadumbrado y conteniendo las lágrimas debemos anunciar que retiraremos nuestra API pública. Tiempos...

CipherGist

Si encuentras útil este repositorio de GitHub, ¡considera darle una estrella! ⭐️ 🛡️ CipherGist - Mensajería Cifrada de Extremo a Extremo a través de GitHub Gists CipherGist es un mensajero cifrado ligero, seguro y de código abierto que permite la comunicación privada utilizando GitHub Gists como...

chisel

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

EvilAbigail

Ataque a sistema de archivos raíz cifrado vía initrd Escenario Portátil dejado apagado con FDE activado Atacante arranca desde USB/CD/Red El script se ejecuta e infecta el initrd El usuario regresa al portátil, arranca normalmente El initrd infectado carga: Debian/Ubuntu/Kali un archivo .so en...

PickleC2

PickleC2 PickleC2 es un framework de post-explotación y movimientos laterales Documentación ReadTheDocs Resumen PickleC2 es un framework C2 simple escrito en python3 utilizado para ayudar a la comunidad de Penetration Testers en sus compromisos de red teaming. PickleC2 tiene la capacidad de...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

Loki

Loki Loki is a simple R emote A ccess T ool. Loki uses RSA-2048 with AES-256 to keep your communication with infected machines secure. Disclaimer THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,...

plugxdecoder

plugxdecoder Basic Python script which Decodes PlugX traffic and encrypted/compressed artifacts. Accepting pull requests from those who wish to contribute. Currently requires: CTypes with ntdll, dpkt http://code.google.com/p/dpkt Tested with Python 2.7, on Windows. Long-term goal is to make a pur...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

pinky

Uploading a webshell is almost always the next step after exploiting a web vulnerability, but services like Cloudflare and the new generation of firewalls do a really good job preventing attackers to run commands in the target via HTTP or HTTPS. On the other hand, text content filtering and...

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6671 info: name: WhatsUp Gold GetStatisticalMonitorList SQL Injectio...

op4

op4 — 보안 터미널 메신저 Op4는 Rust로 작성된 터미널 기반 암호화 메시징 애플리케이션입니다. 양자 내성 암호화를 사용한 종단간 암호화 개인 메시징을 제공하며, 모든 트래픽은 Tor 네트워크를 통해 라우팅되어 메시지 내용이나 IP 주소가 상대방을 포함한 누구에게도 노출되지 않습니다. 목차 1. op4의 기능 2. 설치 3. 다른 사용자와 연결하기 4. 보안 모델 5. 아키텍처 개요 6. 프로젝트 구조 7. 현재 상태 op4의 기능 op4는 두 사람이 IP 주소나 실제 신원을 노출하지 않고 개인 메시지를 교환할 수 있게...

psc

PortShellCrypter -- PSC Este proyecto - así como su proyecto hermano crash - pertenece a mi conjunto de herramientas contra la censura que permite configurar shells encriptados y reenvío TCP/UDP completamente funcionales en entornos hostiles de censura. También es útil para forense para volcar...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

BrokenFlow

BrokenFlow A simple PoC to invoke an encrypted shellcode by using an hidden call. Introduction This code uses a simple trick to hide the instruction that effectively will jump to our shellcode. This should make the static analysis or emulation more challenging. As always, if this concept was...