sf

PE-sieve is a light-weight tool that helps to detect malware running on the system, equally good equally to collect the potentially malicious fabric for farther analysis. Recognizes in addition to dumps diversity of implants inside the scanned process: replaced/injected PEs, shellcodes, hooks, in addition to other in-memory patches. Detects inline hooks, Process Hollowing, Process Doppelgänging, Reflective DLL Injection, etc. uses library: https://github.com/hasherezade/libpeconv.git Clone: Use recursive clone to larn the repo together alongside the submodule: git clone --recursive https://github.com/hasherezade/pe-sieve.git Latest builds*: *those builds are available for testing in addition to they may last ahead of the official release : 32-bit 64-bit Download Pe-Sieve

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction in addition to automation over nmap. Although it started every bit a small-scale side-project I developed inward lodge to larn @golang , GoScan tin lavatory straightaway live on used to perform host discovery, port scanning, in addition to service enumeration non solely inward situations where beingness stealthy is non a priority in addition to fourth dimension is express (think at CTFs, OSCP, exams, etc.), but also (with a few tweaks inward its configuration) during professional person engagements. GoScan is also peculiarly suited for unstable environments (think unreliable network connectivity, lack of " screen ", etc.), given that it fires scans in addition to keep their dry soil inward an SQLite database. Scans run inward the background (detached from the primary thread), in addition to then fifty-fifty if connectedness to the box running GoScan is lost, res...

h2t is a uncomplicated tool to assistance sysadmins to hardening their websites. Until at in i trial h2t checks the website headers too recommends how to larn inwards better. Dependences Python 3 colorama requests Install $ git clone https://github.com/gildasio/h2t $ cd h2t $ pip install -r requirements.txt $ ./h2t.py -h Usage h2t has subcommands: list too scan . $ ./h2t.py -h usage: h2t.py [-h] {list,l,scan,s} ... h2t - HTTP Hardening Tool positional arguments: {list,l,scan,s} sub-command assistance listing (l) demo a listing of available headers inwards h2t catalog (that tin live on used inwards scan subcommand -H option) scan (s) scan url to hardening headers optional arguments: -h, --help demo this assistance message too exit List Subcommand The list subcommand lists all headers cataloged inwards h2t too tin demo informations almost it every bit a description, links for to a greater extent than informati...

QRLJacker is a highly customizable exploitation framework to demonstrate " QRLJacking Attack Vector " to exhibit how it is slow to hijack services that depend on the QR Code equally an authentication as well as login method, Mainly it aims to heighten safety awareness regarding all the services using the QR Code equally the principal means to login users to unlike services! Prerequisites earlier installing: Linux or MacOS. (Not working on windows) Python 3.7+ Installing instructions: Update Firefox browser to the latest version Install the latest geckodriver from https://github.com/mozilla/geckodriver/releases as well as extract the file as well as therefore exercise : chmod +x geckodriver sudo mv -f geckodriver /usr/local/share/geckodriver sudo ln -s /usr/local/share/geckodriver /usr/local/bin/geckodriver sudo ln -s /usr/local/share/geckodriver /usr/bin/geckodriver Clone the repo amongst git clone https://github.com/OWASP/QRLJacking as well as ther...

Chinese W12scan is a network property discovery engine that tin move automatically aggregate related assets for analysis too use. Here is a spider web source program, simply the scanning cease is at w12scan-client Thinking Based on python3 + django + elasticsearch + redis too role the spider web restful api to add together scan targets. Feature Web Powerful search syntax Search for cms, service, titles, province regions, etc., to rapidly regain relevant targets. title=“abc” # Search from the title header=“abc” # Search from http header body=“123” # Search from trunk text url = “*.baidu.com” # Search for subdomains of baidu.com ip = ‘1.1.1.1’ # Search from IP,support '192.168.1.0/24' too '192.168.1.*' port = ‘80’ # Search shape port app = ’nginx’ # Search application country = ‘cn’ # Search from country service = ‘mysql’ # Search from service bug = 'xx' # Search from Vulnerability Custom assert By customizing a company-relate...

Influenza A virus subtype H5N1 threaded, recursive, spider web directory brute-force scanner over HTTP/2 using hyper , inspired past times Gobuster . Features Fast in addition to portable - install hyper in addition to run. Multiconnection scanning. Multithreaded connections. Scalable: scans tin hand notice move every bit docile or aggressive every bit you lot configure them to be. h2 in addition to h2c support. Configurable directory recursion depth. Install You exclusively remove to install ane dependency. If you lot don't convey hyper , run: pip3 install -r requirements.txt Usage usage: h2buster.py [-h] -w wordlist -u target [-r directory_depth] [-c connections] [-t threads] h2buster: an HTTP/2 spider web directory brute-force scanner. arguments: -h, --help exhibit this assistance message in addition to leave of absence -w wordlist Directory wordlist -u target Target URL/IP address. Default port is 443...

This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability inward Microsoft Remote Desktop. Right now, at that topographic point are well-nigh 900,000 machines on Blue Planet Internet vulnerable to this vulnerability, thence many are to await a worm presently similar WannaCry together with notPetya. Therefore, scan your networks together with spell (or at least, enable NLA) on vulnerable systems. This is a command-line tool. You tin download the source together with compile it yourself, or you lot tin download i of the pre-compiled binaries for Windows or macOS from the link above. This tool is based exclusively on the rdesktop spell from https://github.com/zerosum0x0/CVE-2019-0708 . Primary use To scan a network, run it similar the following: rdpscan 192.168.1.1-192.168.1.255 This produces i of 3 results for each address: SAFE - if target has determined bot travel patched or at to the lowest degree require CredSSP/NLA VULNERABLE - if the target has...