sf

CloudBunny is a tool to capture the existent IP of the server that uses a WAF every bit a proxy or protection. How works In this tool nosotros used 3 search engines to search domain information: Shodan, Censys in addition to Zoomeye. To role the tools yous postulate the API Keys, yous tin pick upwards the next links: Shodan - https://account.shodan.io/ Censys - https://censys.io/account/api ZoomEye - https://www.zoomeye.org/profile NOTE : In Zoomeye yous postulate to teach into the login in addition to password, it generates a dynamic api fundamental in addition to I already produce this operate for you. Just teach into your login in addition to password. After that yous postulate to position the credentials inwards the api.conf file. Install the requirements: $ sudo pip install -r requirements.txt Usage By default the tool searches on all search engines (you tin laid this upwards past times arguments), precisely yous postulate to position the credentials every bit sta...

ZIP File Raider is a Burp Suite extension for attacking spider web application amongst ZIP file upload functionality. You tin easily inject Burp Scanner/Repeater payloads inwards ZIP content of the HTTP requests which is non viable yesteryear default. This extension helps to automate the extraction in addition to compression steps. This software was created yesteryear Natsasit Jirathammanuwat during a cooperative pedagogy course of instruction at King Mongkut's University of Technology Thonburi (KMUTT). Installation Set upward Jython standalone Jar inwards Extender > Options > Python Environment > "Select file...". Add ZIP File Raider extension inwards Extender > Extensions > Add > CompressedPayloads.py (Extension type: Python) How to use Send the HTTP asking amongst a compressed file to the ZIP File Raider First, correct click on the HTTP asking amongst a compressed file inwards HTTP trunk in addition to and therefore direct "Sen...

The Infection Monkey is an opened upward source safety tool for testing a information center's resiliency to perimeter breaches in addition to internal server infection. The Monkey uses diverse methods to self-propagate across a information oculus in addition to reports success to a centralized Monkey Island server. The Infection Monkey is comprised of 2 parts: Monkey - H5N1 tool which infects other machines in addition to propagates to them Monkey Island - H5N1 dedicated server to command in addition to visualize the Infection Monkey's progress within the information center To read to a greater extent than almost the Monkey, see http://infectionmonkey.com Main Features The Infection Monkey uses the next techniques in addition to exploits to propagate to other machines. Multiple propagation techniques: Predefined passwords Common logical exploits Password stealing using Mimikatz Multiple exploit methods: SSH SMB RDP WMI Shellshock Conficker Sam...

This tools uses Google Translator equally a proxy to mail arbitrary commands to an infected machine. [INFECTED MACHINE] ==HTTPS==> [GOOGLE TRANSLATE] ==HTTP==> [C2] Environment Configuration First you lot involve a VPS together with a domain, for the domain you lot tin larn a gratuitous 1 on Freenom . With your VPS together with domain, but edit the customer script, together with ready your domain on job 5. Usage Start the server.py on your VPS python2.7 server.py Execute the customer on a estimator alongside access to Google Translator . bash client.sh Now you lot convey an interactive trounce using named pipage files, YES you lot tin cd into directories. Poc Download GTRS

evilginx2 is a man-in-the-middle assault framework used for phishing login credentials along amongst session cookies, which inwards plough allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx , released inwards 2017, which used a custom version of nginx HTTP server to supply man-in-the-middle functionality to human activeness equally a proxy betwixt a browser in addition to phished website. Present version is fully written inwards GO equally a standalone application, which implements its ain HTTP in addition to DNS server, making it extremely slow to prepare in addition to use. Video See evilginx2 inwards activeness here: Evilginx ii - Next Generation of Phishing 2FA Tokens from breakdev.org on Vimeo . Write-up If y'all desire to larn to a greater extent than close this phishing technique, I've published an extensive weblog post service close evilginx2 here: https://breakdev.org/evilginx-2-next-generation-of-phishing-...

LDAP_Search tin live on used to enumerate Users, Groups, as well as Computers on a Windows Domain. Authentication tin live on performed using traditional username as well as password, or NTLM hash. In addition, this tool has been modified to permit animate beingness force/password-spraying via LDAP. Ldap_Search makes role of Impackets  python36 branch to perform the primary operations. (These are the guys that did the existent heavy lifting as well as deserve the credit!) Installation git clone --recursive https://github.com/m8r0wn/ldap_search cd ldap_search sudo chmod +x setup.sh sudo ./setup.sh Usage Enumerate all active users on a domain: python3 ldap_search.py users -u user1 -p Password1 -d demo.local Lookup a unmarried user as well as display champaign headings: python3 ldap_search.py users -q AdminUser -u user1 -p Password1 -d demo.local Enumerate all computers on a domain: python3 ldap_search.py computers -u user1 -p Password1 -d demo.local Search f...

Sitadel is basically an update for WAScan making it compatible for python >= 3.4 It allows to a greater extent than flexibility for you lot to write novel modules together with implement novel features : Frontend framework detection Content Delivery Network detection Define Risk Level to permit for scans Plugin system Docker icon available to gear upward together with run Installation $ git clone https://github.com/shenril/Sitadel.git $ cd Sitadel $ pip install . $ python sitadel.py --help Features Fingerprints Server Web Frameworks (CakePHP,CherryPy,...) Frontend Frameworks (AngularJS,MeteorJS,VueJS,...) Web Application Firewall (Waf) Content Management System (CMS) Operating System (Linux,Unix,..) Language (PHP,Ruby,...) Cookie Security Content Delivery Networks (CDN) Attacks: Bruteforce Admin Interface Common Backdoors Common Backup Directory Common Backup File Common Directory Common File Log File Injection HTML Injection ...

Conpot is an ICS honeypot alongside the destination to collect intelligence almost the motives as well as methods of adversaries targeting industrial command systems Documentation The construct of the documentations source tin flaming survive flora here . There you lot volition likewise honour the instructions on how to install conpot as well as the FAQ . Easy install using Docker Via a pre-built image Install Docker Run docker push clit honeynet/conpot Run docker run -it -p 80:80 -p 102:102 -p 502:502 -p 161:161/udp --network=bridge honeynet/conpot:latest /bin/sh Finally run conpot -f --template default Navigate to http://MY_IP_ADDRESS to confirm the setup. Build docker paradigm from source Install Docker Clone this repo alongside git clone https://github.com/mushorg/conpot.git as well as cd conpot/docker Run docker construct -t conpot . Run docker run -it -p 80:8800 -p 102:10201 -p 502:5020 -p 161:16100/udp -p 47808:47808/udp -p 623:6230/udp -p 21:2121 -...

DNS-Shell is an interactive Shell over DNS channel. The server is Python based too tin flame piece of job on whatsoever operating arrangement that has python installed, the payload is an encoded PowerShell command. Understanding DNS-Shell The Payload is generated when the sever script is invoked too it merely utilizes nslookup to perform the queries too interrogation the server for novel commands the server too then listens on port 53 for incoming communications, in ane trial payload is executed on the target motorcar the server volition spawn an interactive shell. Once the channel is established the payload volition continously interrogation the server for commands if a novel ascendence is entered, it volition execute it too furnish the number dorsum to the server. Using DNS-Shell Running DNS-Shell is relatively simple DNS-Shell supports 2 trend of operations instantly too recursive modes: Perform a git clone from our DNS-shell Github page DNS-Shell instantly mode: sud...

Just-Metadata is a tool that tin give notice last used to get together intelligence information passively close a large lay out of IP addresses, as well as movement to extrapolate relationships that mightiness non otherwise last seen. Just-Metadata has "gather" modules which are used to get together metadata close IPs loaded into the framework across multiple resources on the internet. Just-Metadata also has "analysis" modules. These are used to analyze the information loaded Just-Metadata as well as perform diverse operations that tin give notice position potential relationships betwixt the loaded systems. Just-Metadata volition allow yous to speedily honour the Top "X" lay out of states, cities, timezones, etc. that the loaded IP addresses are located in. It volition allow yous to search for IP addresses yesteryear country. You tin give notice search all IPs to honour which ones are used inwards callbacks equally identified yesteryear VirusTotal....

Pyrit allows you lot to practice massive databases of pre-computed WPA/WPA2-PSK authentication stage inward a space-time-tradeoff. By using the computational might of Multi-Core CPUs in addition to other platforms through ATI-Stream , Nvidia CUDA in addition to OpenCL , it is currently past times far the most powerful assault against 1 of the world's most used security-protocols. WPA/WPA2-PSK is a subset of IEEE 802.11 WPA/WPA2 that skips the complex draw of piece of occupation of cardinal distribution in addition to customer authentication past times assigning every participating political party the same pre shared key . This master key is derived from a password which the administrating user has to pre-configure e.g. on his laptop in addition to the Access Point. When the laptop creates a connecter to the Access Point, a novel session key is derived from the master key to encrypt in addition to authenticate next traffic. The "shortcut" of using a unmarried ...