791 matches found
net-creds
Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Screenshots --- Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP...
Clematis
Clematis δΈζ | English π οΈ A powerful tool for converting PE files EXE/DLL into position-independent shellcode. β¨ Key Features Support for converting PE files EXE/DLL to shellcode Compatible with both x86 and x64 architectures Command-line argument support Built-in LZNT1 compression algorithm for...
libpcap
LIBPCAP 1.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing. The documentation directory has README...
mkPIVM
Read the research paper written for 1.0.0. mkPIVM is a polymorphic position-independent shellcode virtualizer for Windows x86 and x64 Linux soon. Feed it raw shellcode. It emits another raw blob: a small virtual machine that interprets a lifted, encrypted-at-rest version of your original...
cve_2026_31431
CVE-2026-31431 "Copy Fail" Toolkit Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are explicitly engaged to...
dradis-ce
Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...
Lastenzug
LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...
malasada
malasada Donut for Linux, converts a Linux ELF shared object .so into a position-independent .bin blob that can be executed directly from memory for example, by copying it into an mmap'd region and jumping to it as a function pointer. This project intentionally avoids memfd memfdcreate, execveat ...
Reticulum
Reticulum Network Stack !WARNING A significant number of hastily launched, incorrect, dubious, directly harmful and, in most cases, entirely LLM-generated fakes of Reticulum implementations, "documentation", "guides" and user-facing applications are currently being marketed under polished, but...
rsyscall
Summary rsyscall is a library which provides a interface to an ever-growing subset of Linux system calls. This interface is: process-independent : all system calls are called as methods on process objects, which can refer to the "local" process or to other processes under our control, possibly on...
HandleKatz
HandleKatz This tool was implemented as part of our Brucon2021 conference talk and demonstrates the usage of cloned handles to Lsass in order to create an obfuscated memory dump of the same. It compiles down to an executable living fully in its text segment. Thus, the extracted .text segment of t...
sRDI
sRDI - Shellcode Reflective DLL Injection sRDI allows for the conversion of DLL files to position independent shellcode. It attempts to be a fully functional PE loader supporting proper section permissions, TLS callbacks, and sanity checks. It can be thought of as a shellcode PE loader strapped t...
xalgorix
Xalgorix β Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported β so you get proof, not a pile of maybes to triage...
execute-assembly-pico
Execute Assembly PICO A PICO for Crystal Palace that implements native CLR hosting to execute an appended .NET assembly in memory, using the same technique as the donut shellcode generator. This allows you to load .NET tools like Rubeus or Seatbelt from position-independent code without dropping...
BloodfangC2
Bloodfang is a modern implant with position independent code that compiles to 64 & 32 bit Windows systems. Compiled implant shellcode is about 6 KB Kilobytes. Its execution in memory has very little footprint. Props to: https://5pider.net/blog/2024/01/27/modern-shellcode-implant-design That said;...
ShellcodeCompiler
Shellcode Compiler Shellcode Compiler is a program that compiles C/C++ style code into a small, position-independent and NULL-free shellcode for Windows x86 and x64 and Linux x86 and x64. It is possible to call any Windows API function or Linux syscall in a user-friendly way. Shellcode Compiler...
xeca
xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...
peCloakCapstone
peCloak - Capstone This is a simple fork of SecuritySift's peCloak that uses Capstone. The intention is to provide a fork based on a well-maintained, up-to-date disassembly library and to make the script multi-platform. Here's what I did so far: Replaced pydasm with Capstone Included a patched...
lk_scraper
LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...
donut
Current version: v1.1 Table of contents 1. Introduction 2. How It Works 3. Building 4. Usage 5. Subprojects 6. Developing with Donut 7. Questions and Discussions 8. Disclaimer 1. Introduction Donut is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL file...