snare

SNARE 超级下一代高级响应式蜜罐 关于 SNARE 是一个 Web 应用蜜罐传感器，可吸引来自互联网的各种恶意行为。 文档 文档可在此处找到。 基本概念 表面优先。专注于攻击面生成。 传感器与主控。轻量级收集器（SNARE）与中央决策器（tanner）。 开始使用 你需要 Python 3.6 来运行 SNARE 本工具已在最新的基于 Ubuntu 的 Linux 上测试通过。 设置步骤 1. 获取 SNARE：git clone https://github.com/mushorg/snare.git 并 cd snare 2. 可选 创建虚拟环境：python3 -m venv...

Cooper

Cooper, noun, a maker or repairer of casks and barrels It's a "fish in a barrel" joke. I enjoy puns! A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns. Cooper simplifies the process of cloning a target website or email for use in a phishing campaign. Just...

CVE-2024-41663 Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting

Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of...

Command and Control via Legitimate Behavior over HTTP: TrevorC2

TrevorC2 is a client/server model for masking command and control through a normally browsable website. Detection becomes much harder as time intervals are different and does not use POST requests for data exfil. There are two components to TrevorC2 – the client and the server. The client can be...

Mailbox fishing those things: the Chrome address reverse vulnerability use cases-vulnerability warning-the black bar safety net

First talk about the recently seen one of the more interesting vulnerability, the Google browser chrome address inversion, later we'll said. One day, your mailbox has received an incredible message that may come from your boss or your best friend, do not feel strange, it is likely that you are...