DllNotificationInjection – Exploring A Novel Threadless Process Injection Technique
DllNotificationInection is a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. An accompanying blog post with more details is available here How It Works? DllNotificationInection works by creating a new LDR_DLL_NOTIFICATION_ENTRY in the remote process. It inserts it manually into the remote LdrpDllNotificationList by patching of the List.Flink of the list head and...
httpAlive – URL Analysis Tool For Web Application Penetration Test
.webp "httpAlive – URL Analysis Tool For Web Application Penetration Test")
Discover 'httpAlive,' a powerful URL analysis tool designed for web application penetration testing. With features like user-agent rotation, multithreading, and colorized output, this versatile tool efficiently probes for alive subdomains and URLs. In this article, we'll explore its capabilities, installation, and usage, empowering you with a valuable asset for enhancing your web application security assessments. Overview The "httpAlive" tool is designed...
DDoS Scripts – Supercharging Your Kali Linux With Hacking Tools
.webp "DDoS Scripts – Supercharging Your Kali Linux With Hacking Tools")
Explore the world of DDoS scripts and hacking tools to enhance your Kali Linux experience. In this comprehensive guide, we dive into the latest updates and additions, such as Nvidia GPU drivers, Arc themes, and essential security tools. Discover how to supercharge your Kali Linux system and stay at the forefront of cybersecurity. All things to do after installing...
katoolin – Streamline Your Kali Linux Tool Installation With This Comprehensive Guide
.webp "katoolin – Streamline Your Kali Linux Tool Installation With This Comprehensive Guide")
katoolin is a powerful tool that simplifies the installation of Kali Linux tools on compatible systems. With the ability to add or remove Kali Linux repositories and effortlessly install a wide range of security tools, katoolin streamlines the process, making it accessible even for those new to Kali Linux. In this guide, we will explore the features, installation, and...
PwnDoc – Streamlining Pentest Reporting For Efficient Vulnerability Management
.webp "PwnDoc – Streamlining Pentest Reporting For Efficient Vulnerability Management")
PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report.The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Vulnerabilities Audits Templating Features Multiple Language support Multiple Data support Great Customization Manage reusable Audit and Vulnerability Data Create Custom Sections Add custom fields to Vulnerabilities Vulnerabilities Management Multi-User reporting Docx Report Generation Docx Template...
Bypass Fuzzer – Exploring A Powerful Tool For Testing End Point Security
.webp "Bypass Fuzzer – Exploring A Powerful Tool For Testing End Point Security")
This tool performs various checks via headers, path normalization, verbs, etc. to attempt to bypass ACL's or URL validation. It will output the response codes and length for each request, in a nicely organized, color coded way so things are reaable. I implemented a "Smart Filter" that lets you mute responses that look the same after a certain number of times. You...
SSH3 – Faster And Rich Secure Shell Using HTTP/3
.webp "SSH3 – Faster And Rich Secure Shell Using HTTP/3")
SSH3 is a complete revisit of the SSH protocol, mapping its semantics on top of the HTTP mechanisms. In a nutshell, SSH3 uses QUIC+TLS1.3 for secure channel establishment and the HTTP Authorization mechanisms for user authentication. Among others, SSH3 allows the following improvements: Significantly faster session establishment New HTTP authentication methods such as OAuth 2.0 and OpenID Connect in addition to classical SSH authentication Robustness to port scanning attacks: your...
EasyEASM : Your Zero-Dollar Solution For Attack Surface Management
Easy EASM is just that... the easiest to set-up tool to give your organization visibility into its external facing assets. The industry is dominated by $30k vendors selling "Attack Surface Management," but OG bug bounty hunters and red teamers know the truth. External ASM was born out of the bug bounty scene. Most of these $30k vendors use this open-source...
PMKID WPA2 Cracker – Decrypting WPA2 WiFi Networks The Easy Way
.webp "PMKID WPA2 Cracker – Decrypting WPA2 WiFi Networks The Easy Way")
This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program Usage python pmkidcracker.py -s <SSID> -ap <APMAC> -c <CLIENTMAC> -p <PMKID> -w <WORDLIST> -t...
CloudRecon – Uncovering Hidden Cloud Assets With SSL Certificate Analysis
In the ever-evolving landscape of cybersecurity, red teamers and bug hunters are constantly seeking new tools to aid in their campaigns and hunts. CloudRecon, a powerful suite of tools presented at DEFCON 31 by Gunnar Andrews and Jason Haddix, is one such solution. This article explores how CloudRecon empowers security professionals to discover ephemeral and development assets within cloud...
