PyIris

The project is currently undergoing a major rewrite for version 3, the current version, version 2 will be made obsolete. See for more info. The PyIris Project Updates coming soon refer to ROADMAP.md The PyIris project is a modular remote access trojan toolkit written completely in python. It allo...

ASWCrypter

Welcome to the ASWCrypter script v1.0 100% FUD An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far FUD ; . PLEASE DON'T UPLOAD BACKDOOT TO WWW.VIRUSTOTAL.COM 23/08/2018 Important This Version Just for test , In future I will update ASWCrypter to generate a payloads fo...

Shortcut-Payload-Generator

Shortcut-Payload-Generator Exploiting Powershell to make ShortCut Payloads fud. There is too much of awsome tricks there , u can make it better ^^. For Ex : Killing tcpview , taskmanager ..etc while downloading. Set hidden attribs to the malware after downloading....etc G00d by3. ./9aylas EOF...

hackEmbedded

hackebds 🔗中文 readme Overview hackebds is a toolkit for embedded-device payload generation, encrypted shell workflows, SOCKS5 proxy tunneling, and device information lookup. The current branch uses a pure ELF workflow for encrypted shell and proxy features: reverseshellfile + encryptedshellserver ...

OSRipper

OSRipper v0.4.2 Advanced cross-platform payload generator and crypter with FUD capabilities Features • Quick Start • Web UI • Payload Types • Documentation Overview OSRipper is a sophisticated, fully undetectable FUD backdoor generator and crypter designed for authorized penetration testing and r...

AggressorScripts

Aggressor Scripts Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources AllInOne.cna v1 - Removed and outdated All purpose script to enhance the user's experience with cobaltstrike. Custom menu creation, Logging, Persistence, Enumeration, and 3rd party script...

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus 中文 README Description JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. Using this tool allows you get JNDI links, you can insert these links into your POC to tes...

Kitsune

Kitsune Kitsune is a Polymorphic Command & Control. This tool allows you to get a graphical version of your favourite hacking tools, such as NetExec, Villain or Evil-WinRM among others. In addition, brings many improvements such as automatic reconnection, reports, history and some extra functions...

JSshell

JSshell - version 3.1 JSshell - a JavaScript reverse shell. This is used for executing JS code remotely, exploiting blind XSS, ... Requirements: Any OS + Python 2 or Python 3 New in JSshell version 3.1 Updated in the new version of JShell 3.1: New JSshell command: snippet - allows to write a...

reverse-shell-generator

reverse-shell-generator Hosted Reverse Shell generator with a ton of functionality -- great for CTFs Hosted Instance https://revshells.com Features Generate common listeners and reverse shells Save button to download Payloads from browser. Raw mode to cURL shells to your machine. Button to...

easysploit

EasySploit EasySploit v4.2 Linux - Metasploit automation EASIER and FASTER than EVER Disclaimer: Usage of EASYSPLOIT for attacking targets without prior mutual consent is ILLEGAL. Developers are not responsible for any damage caused by this script. EASYSPLOIT is intented ONLY FOR EDUCATIONAL...

Anti-Virus-Evading-Payloads

🚩 Anti-Virus-Evading-Payloads !CAUTION Durante la fase de explotación de una prueba de penetración o de un compromiso de hacking ético, en última instancia tendrás que intentar ejecutar código en los equipos del sistema objetivo. Ya sea mediante correos de phishing, la entrega de un payload a...

Brutal

现在 Teensy 可以用于渗透测试 Teensy 就像橡胶鸭 Rubber Ducky，为什么我选择 Teensy？因为对我来说价格非常便宜。它在无需人为键盘交互（HID 攻击）的情况下执行目标机器上的脚本极为有用。当你插入设备时，它会被检测为键盘，利用微处理器和板载闪存存储，你可以向目标机器发送非常快速的按键序列，并完全攻破它，无论自动运行是否开启。我在安全测试中使用它来运行侦察或枚举脚本、执行反向 shell、利用本地 DLL 劫持/提权漏洞，以及获取所有密码。 现在我正在开发一个新工具，名字叫 Brutal。 Brutal Brutal 是一个工具包，用于快速创建各种...

msfpc

MSFvenom Payload Creator MSFPC 一种通过 msfvenom（Metasploit 框架的一部分）快速生成各种“基本”Meterpreter 有效载荷的工具。 关于 MSFvenom Payload Creator MSFPC 是一个封装工具，用于根据用户选择生成多种类型的有效载荷。其理念是尽可能简单 （只需一个输入 ）来生成有效载荷。 终极目标是完全自动化 msfvenom 和 Metasploit（当然也要能够自动化 MSFPC 本身）。其余部分则是为了让用户的生活尽可能轻松 （例如 IP 选择菜单 、msfconsole 资源文件/命令 、批量生成有效载...

avoidz

Avoidz v 1.3 root@kitploit: Author: Mascerano Bachir dev-labs Legal Disclamer: root@kitploit: The author does not hold any responsibility for the bad use of this tool, remember this is only for educational purpose. Description: root@kitploit: This tool Generate encoded powershell with metasploit...

discover

root@kitploit: Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux or Ubuntu. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 Jason Ashton @ninewir...

cve-2020-2555

CVE-2020-2555 运行Main.java会在当前目录下生成payload.ser，该payload可以使用t3协议发到目标服务器...

XanXSS

XanXSS XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: root@kitploit: /cLIcKMe!XaNxss With XanXSS every payload is...

Insanity-Framework

Insanity-Framework THIS PROJECT ARE CLOSED NOW - FEEL FREE TO CONTINUE IT Copyright 2017 Insanity Framework IF 2.0 END Written by: Alisson Moretto - 4w4k3 Special Thanks to Thomas Perkins - Ekultek Insanity Payload consists of encrypting your code and decrypting it in memory, thus avoiding a...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 最近，我遇到了一个 Sharepoint 2010 SP2 实例，而我测试的所有概念验证（PoC）均未成功，直到我意识到该服务器运行在 .NET 3.5 上，这需要不同的库。 这是适用于 .NET 3.5 的 .dll 文件。代码来自 https://github.com/linhlhq/CVE-2019-0604。它将生成序列化载荷。...