Invoke-PSObfuscation

Invoke-PSObfuscation Las técnicas tradicionales de ofuscación tienden a añadir capas para encapsular el código existente, como base64 o compresión. Estas cargas útiles siguen teniendo un éxito variable, pero se ha vuelto trivial extraer la carga útil prevista y algunos lanzadores se detectan con...

TREVORproxy

TREVORproxy Un proxy SOCKS escrito en Python que aleatoriza tu dirección IP de origen. Distribuye tus paquetes malvados en round-robin a través de túneles SSH o ¡dales miles de millones de direcciones IP únicas! Consulta el Blog Post adjunto para una divertida charla y algunas demostraciones...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

CodiMD <2.5.4 - Insecure Filename Randomization

CodiMD does not require valid authentication to access uploaded images or to upload new image data. An attacker who can determine an uploaded image's URL can gain unauthorised access to uploaded image data. Due to the insecure random filename generation in the underlying Formidable library, an...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage root@kitploit: git clone...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

autodeauth

autodeauth Una herramienta/servicio diseñada para desautenticar automáticamente redes locales Probado en Raspberry Pi OS y Kali Linux Configuración root@kitploit: $ chmod +x setup.sh $ sudo ./setup.sh Esto se puede cambiar editando /etc/systemd/system/autodeauth.service ? Ingresa la interfaz WiFi...

snapchat-map-scraper

Descargador de Historias de Snapchat Este programa puede buscar en los Snap Map públicos de Snapchat en múltiples ubicaciones y descargar todas las historias para su posterior investigación y categorización. Se desconoce mucho sobre cómo Snapchat decide qué videos aparecen en qué "punto" del mapa...

LightsOut

LightsOut LightsOut generará un DLL ofuscado que deshabilitará AMSI y ETW mientras intenta evadir el AV. Esto se logra aleatorizando todas las funciones de WinAPI utilizadas, codificando cadenas con XOR y utilizando comprobaciones básicas de sandbox. Mingw-w64 se utiliza para compilar el código C...

CVE-2019-2215

CVE-2019-2215 Andriod binder bug record.Just only test on emulator : ubuntu 22.04 | 4G | 4 cpus andriod studio Pixel2 | Andriod 10.0Q--Google Play Intel x86 Atom 64 System Image | API-29 ndk 21.0.6113669 origin/android-goldfish-4.14-dev | kernel version is 4.14.175 algunas opciones de configuraci...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

Malleable-C2-Randomizer

Malleable-C2-Randomizer Este script randomiza perfiles Malleable C2 de Cobalt Strike mediante el uso de un metalenguaje, reduciendo así las posibilidades de activar controles de detección basados en firmas. En resumen, el script analiza la plantilla proporcionada, sustituye las variables por un...

ps5-umtxdbg

NOTES The bug was found in early december 2020, not by me, but a genius who looked 15mins at fbsd and immediately spotted it 🙇‍♂️. This c++ impl was made when experimenting with increasing exploit reliability after ps5 kernel added some heap randomization features. setup vm get vm image...

hide-me

Cambiador aleatorio de MAC y nombre de host hide-me Cada vez que intentaba realizar una Prueba de Penetración de Red, necesitaba seguir algunos pasos para asegurarme de estar oculto: poner mi interfaz hacia abajo, cambiar mi dirección MAC, cambiar mi nombre de host, volver a levantar la interfaz ...

hawkopsec

HawkOpsec One-tap Linux OPSEC hardening & anonymity toolkit -0b0d10 HawkOpsec turns a pile of manual privacy commands into security modes you apply with one tap. Pick a mode — the tool starts Tor, configures DNS, randomizes your identity and hardens the kernel for you. Hit RESET and every change ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in the .notes section. When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the “startupxen” entry point. This information is used before booting...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw in the processing of received ICMP errors such as ICMP fragments and ICMP redirections within the Linux kernel’s functionality was identified. This flaw allows an off-path remote user to quickly scan open UDP ports. This vulnerability enables a remote user to bypass the UDP source port...

Astra Linux – Vulnerability in exempi

The XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to the disclosure of arbitrary memory. An attacker could exploit this vulnerability to bypass security measures such as ASLR. Exploiting this issue requires user interaction, as the...

Astra Linux – Vulnerability in sane-backends

A out-of-bounds read in SANE backends before version 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, also known as GHSL-2020-081...

Astra Linux – Vulnerability in glibc

On the x86-64 architecture, the GNU C Library also known as glibc prior to version 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable during program execution after a security transition. This allows local attackers to restrict the possible mapping addresses for loaded libraries,...