sf

PRETty is useful when a large reveal of printers are introduce on a network. Instead of scanning, logging, in addition to manually running PRET againt each private printer, PRETty volition automatically discover in addition to run choosen PRET payloads against all printers on the target network. Additionally, PRETty tin live on used to automate command/payload delivery to whatsoever given listing of printers (See the "Lists" section) GUIDE: Installation Install PRET in addition to all required dependencies Install requirements: sudo pip install -U argparse termcolor in addition to sudo apt -y install arp-scan tshark Navigate to where yous installed PRET : cd PRET Install PRETty into PRET : git clone https://github.com/BusesCanFly/PRETty Navigate to PRETty: cd PRETty Make PRETty executable: chmod +x PRETty.py One delineate of piece of job variant (from PRET folder): sudo apt -y install arp-scan tshark && sudo pip install -U argparse termcolo...

Commix (short for [ comm ]and [ i ]njection e[ x ]ploiter) is an automated tool written past times Anastasios Stasinopoulos ( @ancst ) that tin hold upwards used from spider web developers, penetration testers or fifty-fifty safety researchers inward club to seek web-based applications amongst the thought to honor bugs, errors or vulnerabilities related to command injection attacks. By using this tool, it is real slow to honor as well as exploit a command injection vulnerability inward a surely vulnerable parameter or HTTP header. Requirements Python version 2.6.x or 2.7.x is required for running this program. Installation Download commix past times cloning the Git repository: git clone https://github.com/commixproject/commix.git commix Commix comes packaged on the official repositories of the next Linux distributions, as well as hence y'all tin role the package manager to install it! ArchStrike BlackArch Linux BackBox Kali Linux Parrot Security OS Wea...

ISF(Industrial Exploitation Framework) is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on opened upwards source projection routersploit . Read this inward other languages: English , 简体中文 , ICS Protocol Clients Name Path Description modbus_tcp_client icssploit/clients/modbus_tcp_client.py Modbus-TCP Client wdb2_client icssploit/clients/wdb2_client.py WdbRPC Version two Client(Vxworks 6.x) s7_client icssploit/clients/s7_client.py s7comm Client(S7 300/400 PLC) Exploit Module Name Path Description s7_300_400_plc_control exploits/plcs/siemens/s7_300_400_plc_control.py S7-300/400 PLC start/stop s7_1200_plc_control exploits/plcs/siemens/s7_1200_plc_control.py S7-1200 PLC start/stop/reset vxworks_rpc_dos exploits/plcs/vxworks/vxworks_rpc_dos.py Vxworks RPC remote dos（CVE-2015-7599） quantum_140_plc_control exploits/plcs/schneider/quantum_140_plc_control....

QRLJacker is a highly customizable exploitation framework to demonstrate " QRLJacking Attack Vector " to exhibit how it is slow to hijack services that depend on the QR Code equally an authentication as well as login method, Mainly it aims to heighten safety awareness regarding all the services using the QR Code equally the principal means to login users to unlike services! Prerequisites earlier installing: Linux or MacOS. (Not working on windows) Python 3.7+ Installing instructions: Update Firefox browser to the latest version Install the latest geckodriver from https://github.com/mozilla/geckodriver/releases as well as extract the file as well as therefore exercise : chmod +x geckodriver sudo mv -f geckodriver /usr/local/share/geckodriver sudo ln -s /usr/local/share/geckodriver /usr/local/bin/geckodriver sudo ln -s /usr/local/share/geckodriver /usr/bin/geckodriver Clone the repo amongst git clone https://github.com/OWASP/QRLJacking as well as ther...

Collect information near leaked electronic mail addresses from Pastebin About Script parses Pastebin email:password dumps together with get together information near each electronic mail address. It supports Google, Trumail, Pipl, FullContact together with HaveIBeenPwned . Moreover, it allows you lot to shipping an informational postal service to someone near his leaked password, at the terminate every information lands inward Elasticsearch for farther exploration. It supports alone ane format - email:password. Everything else volition non work! For now, notification plant when it finds jibe on FullContact together with side past times side sends you lot electronic mail address together with associated social media accounts. Requirements: Python 3 FullContact API https://www.fullcontact.com/developer/ Google Pipl API https://pipl.com/api/ HaveIBeenPwned SafePush (for notification - optional - In progress) https://www.pushsafer.com/ Trumail https://trumail.io/ Gmai...

barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows yous to easily perform attacks on a running AWS infrastructure. It allows yous to laid upward on running EC2 instances without having the master copy instance SSH keypairs. It also allows yous to perform enumeration as well as extraction of stored Secrets as well as Parameters inwards AWS. Prerequisites An existing AWS line organisation human relationship access fundamental id as well as undercover (Token likewise inwards unopen to case) Python ii or 3. It tin sack run amongst both. To run the msfvenom payloads, yous withdraw msfvenom to live on available on your workstation, amongst the PATH setup correctly. Installing For python 2: pip install -r requirements.txt For python3 pip3 install -r requirements.txt Better to practise a virtualenv environs for the tool. Please banking concern annotation that using sudo amongst pip is non recommended. Author ...