NetworkAssessment

NetworkAssessment: Network Compromise Assessment Tool The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. Features D...

sshtunnel

|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

sshuttle

sshuttle: 透過プロキシとVPNとsshが出会う場所 私の知る限り、sshuttleは以下の一般的なケースを解決する唯一のプログラムです： クライアントマシン（またはルーター）がLinux、FreeBSD、MacOS、またはWindowsである。 SSH経由でリモートネットワークにアクセスできる。 リモートネットワークで管理者権限を必ずしも持っている必要はない。 リモートネットワークにVPNがない、または複雑なVPNプロトコル（IPsec、PPTPなど）しかない。あるいは、あなた自身が管理者で、VPNツールのひどい状態にうんざりしている場合。...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ はじめに WOTOP...

meterssh

MeterSSH 作者: David Kennedy 所属企業: TrustedSec Webサイト: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH は、シェルコードを取得し、それをメモリに注入した後、任意のポートを SSH 経由でトンネリングすることで、あらゆる通信を通常の SSH 接続のように偽装する方法です。仕組みとしては、シェルコードをメモリに注入し、シェルコードによって生成されたポート（この場合は meterpreter）を SSH...

meterssh

Tool Name: MeterSSH Written by: David Kennedy Company: TrustedSec Website: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH...

sshuttle

sshuttle：透明代理、VPN与SSH的融合 据我所知，sshuttle是唯一能解决以下常见场景的程序： 你的客户端机器（或路由器）是 Linux、FreeBSD 或 MacOS。 你可以通过 SSH 访问远程网络。 你不一定拥有远程网络的管理员权限。 远程网络没有 VPN，或者只有愚蠢/复杂的 VPN 协议（IPsec、PPTP 等）。或者你 就是 管理员，只是对 VPN 工具的糟糕状态感到沮丧。 你不想为远程网络上的每一个主机/端口创建一个 SSH 端口转发。 你讨厌 OpenSSH 的端口转发，因为它随机地慢且/或愚蠢。 你无法使用 OpenSSH 的 PermitTunnel...

sidedoor

sidedoor sidedoorは、シェルスクリプトデーモンを用いてSSH接続またはトンネルを維持します。 主なユースケースは、ローカルSSHサーバー（または別のポート）へのリモートポートフォワードを維持することです。これにより、NATやファイアウォールでブロックされたり、モバイル機器では実用的でない受信接続を使用せずに、ローカルデバイスにアクセスできます。 SSHクライアントは、sidedoorがトンネルするリバースSSHプロキシを介してデバイスに接続できます。このプロキシサーバーは信頼されていないものでもよく、サードパーティやクラウドサービスが運用できます。...

CVE-2019-20030

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected...

EUVD-2019-10586

Malware in sbrugna...

NetworkAssessment - With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor

The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. DNS Tunneling Detection : Identifies potential covert...

Network_Assessment - With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you monitor. This Python script analyzes network traffic in a given .pcap file and attempts to detect the following suspicious network activities and attack...

Update share links to use FRP instead of SSH tunneling

Impact This is a vulnerability which affects anyone using Gradio's share links i.e. creating a Gradio app and then setting share=True with Gradio versions older than 3.13.1. In these older versions of Gradio, a private SSH key is sent to any user that connects to the Gradio machine, which means...

Bento - A Minimal Fedora-Based Container For Penetration Tests And CTF With The Sweet Addition Of GUI Applications

A bento 弁当, bentō is a single-portion take-out or home-packed meal of Japanese origin. Bento Toolkit is a simple and minimal docker container for penetration testers and CTF players. It has the portability of Docker with the addition of X, so you can also run GUI application like burp...

Uncovered: APT 'Hackers For Hire' Target Financial, Entertainment Firms

A hackers-for-hire operation has been discovered using a strain of previously undocumented malware to target South Asian financial institutions and global entertainment companies. Dubbed "CostaRicto" by Blackberry researchers, the campaign appears to be the handiwork of APT mercenaries who posses...

Pioneer Kitten APT Sells Corporate Network Access

An APT group known as Pioneer Kitten, linked to Iran, has been spotted selling corporate-network credentials on hacker forums. The credentials would let other cybercriminal groups and APTs perform cyberespionage and other nefarious cyber-activity. Pioneer Kitten is a hacker group that specializes...

CVE-2019-20030

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected...

Code injection

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected...

CVE-2019-20030

The CVE-2019-20030 entry concerns a NEC UM8000 voicemail system where an attacker who knows the modem access number can use SSH tunneling or standard Linux tools to access the system’s LAN port. All versions are affected. Red Hat and NVD entries corroborate a local-access issue with potential imp...

SCANdalous! (External Detection Using Network Scan Data and Automation)

Real Quick In case you’re thrown by that fantastic title, our lawyers made us change the name of this project so we wouldn’t get sued. SCANdalous—a.k.a. Scannah Montana a.k.a. Scanny McScanface a.k.a. “Scan I Kick It? Yes You Scan”—had another name before today that, for legal reasons, we’re...