Posts

Showing posts with the label Fiddler

Pentol - Pentester Toolkit For Fiddler2

Image
PENTOL - Pentester Toolkit is built equally a plugin for the Fiddler HTTP debugging proxy. Features CORS DETECTED Cross-Origin Resource Sharing CRLF DETECTED HTTP reply splitting Headers DETECTED (X-Frame-Options) USAGE Install Fiddler2 Open Fiddler2 Press Key CTRL + R or Rules > Customize Rules... Copy all script SampleRules.js Press Key CTRL + S for Save Check tools inwards Rules TAB Credits Thanks to allah Eka Syahwan (Creator) bugrecon / H1 / bugcrowd Edo Maland (Powerstager) https://github.com/Screetsec Jack Wilder admin inwards http://www.linuxsec.org Disclaimer Note: modifications, changes, or changes to this code tin locomote accepted, however, every world liberate that uses this code must locomote approved past times writing this tool (Eka S) Download PENTOL

Imaginaryc2 - Tool Which Aims To Aid Inwards The Behavioral (Network) Analysis Of Malware

Image
author: Felix Weyne ( website ) ( Twitter ) Imaginary C2 is a python tool which aims to assistance inward the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to larn inward slow to replay captured Command-and-Control responses/served payloads. By using this tool, an analyst tin feed the malware consistent network responses (e.g. C&C instructions for the malware to execute). Additionally, the analyst tin capture as well as inspect HTTP requests towards a domain/IP which is off-line at the fourth dimension of the analysis. Replay package captures Imaginary C2 provides 2 scripts to convert packet captures (PCAPs) or Fiddler Session Archives into request definitions which tin survive parsed yesteryear imaginary C2. Via these scripts the user tin extract HTTP asking URLs as well as domains, every bit good every bit HTTP responses. This way...