sf

PENTOL - Pentester Toolkit is built equally a plugin for the Fiddler HTTP debugging proxy. Features CORS DETECTED Cross-Origin Resource Sharing CRLF DETECTED HTTP reply splitting Headers DETECTED (X-Frame-Options) USAGE Install Fiddler2 Open Fiddler2 Press Key CTRL + R or Rules > Customize Rules... Copy all script SampleRules.js Press Key CTRL + S for Save Check tools inwards Rules TAB Credits Thanks to allah Eka Syahwan (Creator) bugrecon / H1 / bugcrowd Edo Maland (Powerstager) https://github.com/Screetsec Jack Wilder admin inwards http://www.linuxsec.org Disclaimer Note: modifications, changes, or changes to this code tin locomote accepted, however, every world liberate that uses this code must locomote approved past times writing this tool (Eka S) Download PENTOL

Ponce (pronounced [ 'poN θe ] pon-they ) is an IDA Pro plugin that provides users the mightiness to perform taint analysis too symbolic execution over binaries inward an slow too intuitive fashion. With Ponce y'all are 1 click away from getting all the mightiness from cutting border symbolic execution. Entirely written inward C/C++. Why? Symbolic execution is non a novel concept inward the safety community. It has been some for years but it is non until the terminal duad of years that opened upwards source projects similar Triton too Angr stimulate got been created to address this need. Despite the availability of these projects, halt users are oftentimes left to implement specific usage cases themselves. We addressed these needs past times creating Ponce, an IDA plugin that implements symbolic execution too taint analysis inside the most used disassembler/debugger for contrary engineers. Installation Ponce plant amongst both x86 too x64 binaries inward ...

Decker is a penetration testing orchestration framework. It leverages HashiCorp Configuration Language 2 (the same config linguistic communication every bit Terraform ) to allow declarative penetration testing every bit code , too thus your tests tin hold upward versioned, shared, reused, too collaborated on amongst your squad or the community. Example of a decker config file: // variables are pulled from environs // ex: DECKER_TARGET_HOST // they volition hold upward available throughout the config files every bit var.* // ex: ${var.target_host} variable "target_host" { type = "string" } // resources refer to plugins // resources demand unique names too thus plugins tin hold upward used to a greater extent than than in 1 lawsuit // they are declared amongst the form: 'resource "plugin_name" "unique_name" {}' // their outputs volition hold upward available to others using the shape unique_name.* // ex: nmap.443 resourc...

IDArling is a collaborative reverse engineering plugin for IDA Pro in addition to Hex-Rays . It allows to synchronize inwards real-time the changes made to a database yesteryear multiple users, yesteryear connecting together dissimilar instances of IDA Pro. The top dog features of IDArling are: hooking full general user events structure in addition to enumeration support Hex-Rays decompiler syncing replay engine in addition to auto-saving database loading in addition to saving interactive condition bar widget user cursors (instructions, functions, navbar) invite in addition to next an user moves dedicated server using Qt5 integrated server inside IDA LAN servers discovery following an user moves inwards existent time If yous convey whatever questions non worthy of a põrnikas report, experience complimentary to ping us at #idarling on freenode in addition to inquire away. Releases This projection is nether active development. Feel complimentary to shipping a P...

This tools is continued from Nefix, DirsPy as well as Xmasspy project. Installation Will operate fine inwards the debian shade operating system, similar Backbox, Ubuntu or Kali linux. $ git clone https://github.com/koboi137/darksplitz $ cd darksplitz/ $ sudo ./install.sh Features Extract mikrotik credential (user.dat) Password generator Reverse IP lookup Mac address sniffer Online md5 cracker Mac address lookup Collecting url from web.archive.org Web backdoor (Dark Shell) Winbox exploit (CVE-2018-14847) ChimeyRed exploit for mipsbe (Mikrotik) Exploit spider web application Mass apple tree dos (CVE-2018-4407) Libssh exploit (CVE-2018-10933) Discovering Mikrotik device Directory scanner Subdomain scanner Mac address scanner Mac address pinger Vhost scanner (bypass cloudflare) Mass bruteforce (wordpress) Interactive msfrpc client Exploit spider web application plUpload file upload jQuery file upload (CVE-2018-9206) Laravel (.env) sftp-config...

Automatic Analysis Of SWF Files Based On Some Heuristics. Extensible Via Plugins. Install Install the Python (2.7) packages listed inwards requirements.txt . You tin usage the next command: pip install -r requirements.txt If you lot desire to usage the decompilation functionality you lot postulate to install Jython . Ubuntu/Debian users tin outcome apt install jython Clone the projection or download the null file. What FLASHMINGO is an analysis framework for SWF files. The tool automatically triages suspicious Flash files as well as guides the farther analysis process, freeing precious resources inwards your team. You tin easily contain FLASHMINGO’s analysis modules into your workflow. Why To this 24-hour interval forensic investigators as well as malware analysts must bargain amongst suspicious SWF files. If history repeats itself the safety threat may fifty-fifty dice bigger beyond Flash’s terminate of life inwards 2020. Systems volition proceed to back upward a l...