Pentest-tools

Pentest-tools Herramientas de pentest para intranet, actualizadas continuamente...

pivotnacci

pivotnacci 通过部署HTTP代理进入内部网络。Pivotnacci 允许你创建一个与HTTP agents进行通信的socks服务器。架构如下所示： 该工具受到优秀的 reGeorg 的启发。但它包含一些改进： 支持负载均衡服务器 可自定义轮询间隔，有助于降低检测率 自动丢弃被服务器关闭的连接 模块化且更简洁的代码 通过pip安装 受密码保护的代理 支持的socks协议 Socks 4 Socks 5 No authentication User password GSSAPI 安装 从Python包安装： root@kitploit: pip3 install...

reGeorg

reGeorg root@kitploit: | | | | | || | || |/ | | | | | \ | || | | || || || \ | | | ||\|||| |||/||\|| || ... every office needs a tool like Georg [email protected] / @wm [email protected] / @trowalts [email protected] / @kampstaaldraad 版本 1.0 依赖 reGeorg 需要 Python 2.7 以及以下模块：...

Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage

Cybersecurity researchers are calling attention to malicious activity orchestrated by a China-nexus cyber espionage group known as Murky Panda that involves abusing trusted relationships in the cloud to breach enterprise networks. "The adversary has also shown considerable ability to quickly...

Researchers Uncover Stealthy Techniques Used by Cranefly Espionage Hackers

A recently discovered hacking group known for targeting employees dealing with corporate transactions has been linked to a new backdoor called Danfuan. This hitherto undocumented malware is delivered via another dropper called Geppei, researchers from Symantec, by Broadcom Software, said in a...

ABPTTS - TCP Tunneling Over HTTP/HTTPS For Web Application Servers

A Black Path Toward The Sun TCP tunneling over HTTP for web application servers https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS uses a Python client script and a web application server page/package1 to tunnel TCP traffic over an HTTP/HTTP...