antipwny

antipwny Autores: Rohan Vazarkar, David Bitner Un IDS/IPS basado en host escrito en C, orientado a Payloads de Metasploit. Instrucciones AntiPwny requiere .NET Framework 4.5, que puede adquirirse aquí. Un instalador sin conexión está disponible aquí...

avoidz

Avoidz v 1.3 root@kitploit: Autor: Mascerano Bachir dev-labs Aviso legal: root@kitploit: El autor no se hace responsable del mal uso de esta herramienta, recuerde que esto es solo con fines educativos. Descripción: root@kitploit: Esta herramienta genera powershell codificado con payloads de...

Terminator

Terminator : Generador de Payloads de Metasploit Lista de Payloads : Payloads Binarios root@kitploit: 1 Android 2 Windows 3 Linux 4 Mac OS Payloads de Scripting root@kitploit: 1 Python 2 Perl 3 Bash Payloads Web root@kitploit: 1 ASP 2 JSP 3 War Cifradores root@kitploit: 1 Cifrador APK 2 Cifrador...

mjet

mjet Mogwai Security Java Management Extensions JMX Exploitation Toolkit mjet is a tool that can be used to protect insecure configured JMX services. It is based on the blog post "Exploiting JMX-RMI" from Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi" and can be used to...

Veil-Evasion

Veil-Evasion Veil-Evasion es una herramienta diseñada para generar payloads de Metasploit que evaden las soluciones antivirus comunes. NOTA: ./setup/setup.sh debe ejecutarse de nuevo en cada actualización de versión importante. Si recibes errores importantes al ejecutar Veil-Evasion, primero...

Veil

Veil Veil Logo Veil es una herramienta diseñada para generar payloads de metasploit que evitan las soluciones antivirus comunes. Veil actualmente tiene soporte por @ChrisTruncer Requisitos de Software: Los siguientes SO son oficialmente compatibles: Debian 8+ Kali Linux Rolling 2018.1+ Es probabl...

discover

This is a collection of custom bash scripts used to automate various penetration testing tasks, including reconnaissance, scanning, enumeration, and malicious payload creation using Metasploit. The scripts are designed to be used with Kali Linux. The scripts are organized into several categories,...

fimap

fimap is a Python tool designed to find, prepare, audit, exploit, and even automatically Google for local and remote file inclusion LFI/RFI bugs in web applications. It can identify and exploit file inclusion bugs, including include, includeonce, require, and requireonce functions. The tool has a...

Metasploit weekly wrap-up

New module content 1 Metabase Setup Token RCE Authors: Maxwell Garrett, Shubham Shah, and h00die Type: Exploit Pull request: 18232 contributed by h00die Path: exploits/linux/http/metabasesetuptokenrce AttackerKB reference: CVE-2023-38646 Description: This adds a module for an unauthenticated RCE...

Exploitivator - Automate Metasploit Scanning And Exploitation

This has only been tested on Kali. It depends on the msfrpc module for Python, described in detail here: https://www.trustwave.com/Resources/SpiderLabs-Blog/Scripting-Metasploit-using-MSGRPC/ Install the necessary Kali packages and the PostgreSQL gem for Ruby: apt-get install postgresql libpq-dev...

Hackers Turn to OpenDocument Format to Avoid AV Detection

Attackers have a new obfuscation technique that uses the OpenDocument file format for sneaking payloads past antivirus software. Past macro-based attacks have relied on malware hitching a ride with .docx, .zip, .jar and many other file formats. But researchers at Cisco Talos said that because the...

FakeImageExploiter - Use a Fake image.jpg (hide known file extensions) to exploit targets

This module takes one existing image.jpg and one payload.ps1 input by user and builds a new payload agent.jpg.exe that if executed it will trigger the download of the 2 previous files stored into apache2 image.jpg + payload.ps1 and execute them. This module also changes the agent.exe Icon to matc...

Microsoft SQL Server Database Link Crawling Command Execution

This module can be used to crawl MS SQL Server database links and deploy Metasploit payloads through links configured with sysadmin privileges using a valid SQL Server Login. If you are attempting to obtain multiple reverse shells using this module we recommend setting the "DisablePayloadHandler"...