Jasmin-Ransomware

Jasmin The Ransomware A Powerful Ransomware Tool for Security Testing Used by ReadTeams Video Tutorial · Report Bug · Request Free Keygen Table of Contents 1. Disclaimer ⚠️ 2. About The Project Built With Work Flow 3. Setup & Running Prerequisites Installation Webserver Encryption Payload...

strafer

Strafer Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named "STRAFER" to detect potential infections in the...

strafer

Strafer Las infecciones en Elasticsearch están aumentando exponencialmente. Los adversarios están explotando interfaces de Elasticsearch abiertas y expuestas para desencadenar infecciones en implementaciones en la nube y fuera de ella. Durante esta charla, lanzaremos una herramienta llamada...

Umbra

Umbra Umbra is an experimental remotely controllable LKM rootkit for kernels 4.x and 5.x up to 5.7 which opens a network backdoor that can spawn reverse shells to remote hosts, launch malware remotely and much more. The rootkit is still under development, although the features listed below are...

racketeer

Proyecto Racketeer - Toolkit de simulación de ransomware El objetivo de este proyecto es proporcionar una forma para que los equipos simulen y prueben la detección de operaciones comunes de ransomware, de manera controlada, contra un conjunto de activos de la empresa y puntos finales de red. Mode...

tarian

Tarian Queremos mantener esto como código abierto para luchar contra los ataques a nuestro ecosistema favorito de Kubernetes. Podemos combatir amenazas juntos como comunidad, mediante contribución continua. Protege tus aplicaciones que se ejecutan en Kubernetes de ataques maliciosos mediante el...

melee

MELEE：用于检测 MySQL 实例中勒索软件感染的工具 攻击者正在滥用 MySQL 实例在互联网上实施恶意操作。网络犯罪分子瞄准暴露的 MySQL 实例，大规模触发感染以窃取数据、破坏数据并通过勒索索要钱财。例如，MySQL 部署面临的主要威胁之一是勒索软件。我们编写了一款名为 “MELEE” 的工具，用于检测 MySQL 实例中的潜在感染。该工具允许安全研究人员、渗透测试人员和威胁情报专家检测运行恶意代码的被攻陷和受感染的 MySQL 实例。该工具还使您能够针对以云数据库为目标的恶意软件进行高效研究。在此版本的工具中，支持以下模块： MySQL 实例信息收集与侦察 MySQL...

EthernalBlue_report

Informe EthernalBlue ¿Qué es? Es un exploit desarrollado por la NSA, robado por un grupo de hackers, conocido principalmente por ser utilizado en ataques de ransomware, como WannaCry o NotPetya... ¿Por qué hiciste este informe? Me pidieron que hiciera este informe sobre la sala EthernalBlue de...

CVE-2023-46604

CVE-2023-46604 Exploit for CVE-2023-46604 This tool helps to exploit this vulnerability. Shodan Query to find target: root@kitploit: product:"ActiveMQ" port:"61616" Tools Usage: root@kitploit: for read targets from the file: python3 exploit.py -f targets -c http://YourVPS/poc.xml --- single targe...

GwisinMsi

GwisinMsi This repo contains the PoC of the MSI payload used in the blog post. The payload is based on the Gwisin ransomware's MSI payload analysis of the AhnLab ASEC team's blog post. DLL Compiling Configuration Project Project properties c/c++ preprocessor processor definition -...

LockBit-Tattoo

LockBit-Tattoo Electronic: ID: 272784 Joined: Jul 20, 2022 Male: BTC: 3HeNJmgecLNHEhVn3JMcboybTgiFx4DGe3 Media: photo2022-09-0822-15-38.jpg Female: BTC: 3HC5eCcYtW27jhD59mg4U3haWr36teiLXB Media: photo2022-09-1101-07-49.jpg photo2022-09-1101-07-54.jpg DegB2W: ID: 272203 Joined: Jul 16, 2022 Male:...

ESXi_ransomware_bitcoinWallets

Background https://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/ https://twitter.com/ValeryMarchive/status/1621528499315150849 Ransomnote example: Victims so far Wallets used so far 1. 1N8v8sRa2RdYq4xUUwpEePFT34TMzesPUx 2. 15vx9oDSQTJuAoYCL1VwzVBDgKYexRHpyC 3...

ESXiArgs-Recover

ESXiArgs-Recover ESXiArgs-Recover is a tool to allow organizations to attempt recovery of virtual machines affected by the ESXiArgs ransomware attacks. CISA is aware that some organizations have reported success in recovering files without paying ransoms. CISA compiled this tool based on publicly...

IoC_Attack_ESXi_Feb_2023

IoCAttackESXiFeb2023 Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023. News Here are some references regarding the attack: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2023-ALE-015/...

BHPAI

TÀI LIỆU DỰ ÁN: BHPAI Phiên bản hệ thống : V1.6 Enterprise Edition Bản cập nhật Toàn diện Tính năng Hệ thống Tác giả : Rin449 Ngôn ngữ & Công nghệ cốt lõi: C++17 MinGW-w64 / MSYS2, Python 3.9+, PyQt6, MinHook, Capstone Engine, Intel PT Processor Trace, PyTorch, LightGBM, OpenSSL 3.x, zlib,...

ransomwatch

ransomwatch 👀 🦅 ransomwatch trails the extortion sites used by ransomware groups and surfaces an aggregated feed of claims please use the issue template when submitting new groups ⚠️ content withinransomwatch.telemetry.ltd, posts.json, groups.json alongside the docs/ & source/ directories is...

ransomwatch

ransomwatch 👀 🦅 ransomwatch rastrea los sitios de extorsión utilizados por grupos de ransomware y muestra un feed agregado de reclamaciones por favor, utiliza la plantilla de issue al enviar nuevos grupos ⚠️ el contenido dentro deransomwatch.telemetry.ltd, posts.json, groups.json junto con los...

Malware

YARA rules, programs for ransomware families: Akira Babuk Beast BlackByte BlackCat ALPHV BlackMatter BlueLocker MemeCryptor Cerber Conti DarkBit DeadBolt Dharma Enmity GarrantyDecrypt GlobeImposter / NewBomani GoodMorning / SD HardBit Hive / Hunters International HsHarada / Rapture Hunters...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

ransomwatch

RansomWatch RansomWatch es una herramienta de monitoreo de sitios de filtración de ransomware. Extraerá todas las entradas de varios sitios de filtración de ransomware, almacenará los datos en una base de datos SQLite y enviará notificaciones a través de Slack o Discord cuando aparezca una nueva...