Posts

Showing posts with the label Framework

Sniffair - A Framework For Wireless Pentesting

Image
SniffAir is an open-source wireless safety framework which provides the mightiness to easily parse passively collected wireless information every bit good every bit launch sophisticated wireless attacks. SniffAir takes aid of the hassle associated alongside managing large or multiple pcap files land thoroughly cross-examining as well as analyzing the traffic, looking for potential safety flaws. Along alongside the prebuilt queries, SniffAir allows users to exercise custom queries for analyzing the wireless information stored inward the backend SQL database. SniffAir is built on the concept of using these queries to extract information for wireless penetration test reports. The information tin every bit good survive leveraged inward setting upwards sophisticated wireless attacks included inward SniffAir every bit modules. SniffAir is developed past times @Tyl0us as well as @theDarracott Install SniffAir was developed alongside Python version 2.7 Tested as well as supported o...

Novahot - A Webshell Framework For Penetration Testers

Image
novahot is a webshell framework for penetration testers. It implements a JSON-based API that tin communicate alongside trojans written inwards whatsoever language. By default, it ships alongside trojans written inwards PHP, ruby, together with python. Beyond executing organization commands, novahot is able to emulate interactive terminals, including mysql , sqlite3 , together with psql . It additionally implements "virtual commands" that cash inwards one's chips inwards possible to upload, download, edit, together with thought remote files locallly using your preferred applications. Installation Install the executable require from npm: [sudo] npm install -g novahot Then seed a config file: novahot config > /.novahotrc Usage View the available trojans alongside novahot trojan list . Select a trojan inwards a linguistic communication that is appropriate for your target, therefore re-create its source to a novel file. (Ex: novahot trojan though...

Androspy - Backdoor Crypter & Creator Alongside Automatic Ip Poisener

Image
Androspy : is Backdoor Crypter & Creator amongst Automatic IP Poisener Coded By Belahsan Ouerghi Dependencies keytool jarsigner Apache2 Metasploit-Framework xterm Installation sudo apt-get install git git clone https://github.com/TunisianEagles/Androspy.git cd Androspy chmod +x setup.sh sudo ./setup.sh chmod +x androspy.sh sudo ./androspy.sh Tested on : BackBox Linux Kali linux Parrot os Contact Contact - Tunisian Eagles [Email] - tunisianeagles@protonmail.com - TunisianEagles Website - TunisianEagles Download Androspy

Tidos-Framework V1.7 - The Offensive Manual Spider Web Application Penetration Testing Framework

Image
TIDoS Framework is a comprehensive web-app audit framework. let's proceed this simple Highlights :- The top dog highlights of this framework is: TIDoS Framework straight off boasts of a century+ of modules. A consummate versatile framework to comprehend upward everything from Reconnaissance to Vulnerability Analysis. Has five top dog phases, subdivided into 14 sub-phases consisting a total of 104 modules . Reconnaissance Phase has 48 modules of its ain (including active together with passive recon, information disclosure modules). Scanning & Enumeration Phase has got xv modules (including port scans, WAF analysis, etc) Vulnerability Analysis Phase has 36 modules (including most mutual vulnerabilites inward action). Exploits Castle has alone 1 exploit. (purely developmental) And finally, Auxillaries bring got 4 modules. under dev. All iv phases each bring a Auto-Awesome module which automates every module for you. You simply demand the domain, together with ...

Miasm - Contrary Applied Scientific Discipline Framework Inward Python

Image
Miasm is a gratis together with opened upward source (GPLv2) reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a not exhaustive listing of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE using Elfesteem Assembling / Disassembling X86 / ARM / MIPS / SH4 / MSP430 Representing assembly semantic using intermediate language Emulating using JIT (dynamic code analysis, unpacking, ...) Expression simplification for automatic de-obfuscation ... See the official blog for to a greater extent than examples together with demos. Basic examples Assembling / Disassembling Import Miasm x86 architecture: >>> from miasm2.arch.x86.arch import mn_x86 >>> from miasm2.core.locationdb import LocationDB Get a place db: >>> loc_db = LocationDB() Assemble a line: >>> fifty = mn_x86.fromstring('XOR ECX, ECX', loc_db, 32) >>> impress fifty XOR ECX, ECX >...

Lightbulb Framework - Tools For Auditing Wafs

Image
LightBulb is an opened upwards source python framework for auditing spider web application firewalls as well as filters. Synopsis The framework consists of ii top dog algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata inwards the measure membership/equivalence inquiry model. Active learning algorithms permits the analysis of filter as well as sanitizer programs remotely, i.e. given simply the mightiness to inquiry the targeted plan as well as honour the output. SFADiff : Influenza A virus subtype H5N1 black-box differential testing algorithm based on Symbolic Finite Automata (SFA) learning Finding differences betwixt programs alongside similar functionality is an of import safety work every bit such differences tin live on used for fingerprinting or creating evasion attacks against safety software similar Web Application Firewalls (WAFs) which are designed to give away malicious inputs to spider web applications. Motivati...

Veil - Tool To Generate Metasploit Payloads That Bypass Mutual Anti-Virus Solutions

Image
Veil is a tool designed to generate metasploit payloads that bypass mutual anti-virus solutions. Veil is electrical flow nether back upwards past times @ChrisTruncer Software Requirements: The next OSs are officially supported: Debian 8+ Kali Linux Rolling 2018.1+ The next OSs are probable able to run Veil: Arch Linux BlackArch Linux Deepin 15+ Elementary Fedora 22+ Linux Mint Parrot Security Ubuntu 15.10+ Setup Kali's Quick Install apt -y install veil /usr/share/veil/config/setup.sh --force --silent Git's Quick Install NOTE : Installation must endure done amongst superuser privileges. If yous are non using the root concern human relationship (as default amongst Kali Linux), prepend commands amongst sudo or alter to the root user earlier beginning. Your bundle manager may endure unlike to apt . sudo apt-get -y install git git clone https://github.com/Veil-Framework/Veil.git cd Veil/ ./config/setup.sh --force --silent ./config/setup.sh /...

Evilginx2 V2.2.0 - Standalone Man-In-The-Middle Assault Framework Used For Phishing Login Credentials Along Amongst Session Cookies, Allowing For The Bypass Of 2-Factor Authentication

Image
evilginx2 is a man-in-the-middle assault framework used for phishing login credentials along amongst session cookies, which inwards plough allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx , released inwards 2017, which used a custom version of nginx HTTP server to supply man-in-the-middle functionality to human activeness equally a proxy betwixt a browser in addition to phished website. Present version is fully written inwards GO equally a standalone application, which implements its ain HTTP in addition to DNS server, making it extremely slow to prepare in addition to use. Video See evilginx2 inwards activeness here: Evilginx ii - Next Generation of Phishing 2FA Tokens from breakdev.org on Vimeo . Write-up If y'all desire to larn to a greater extent than close this phishing technique, I've published an extensive weblog post service close evilginx2 here: https://breakdev.org/evilginx-2-next-generation-of-phishing-...