Redteam-Hardware-Toolkit : Red Team Hardware Toolkit

0

Redteam should be formed with the intention of identifying and assessing vulnerabilities, testing assumptions, viewing alternate options for attack and revealing the limitations and security risks for that organization. There are many benefits to Red Teaming. First, you have a designated group with tactical experience in challenging the security of your organization at all times. This is important to...

Injector : Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows

0

Injector is a Complete Arsenal of Memory injection and other techniques for red-teaming in Windows. What Does Injector Do? Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.exe and if not found, it will create a notepad process...

DcRat : A Simple Remote Tool Written In C#

0

DcRat is a simple remote tool written in C#. Introduction Features TCP connection with certificate verification, stable and securityServer IP port can be archived through linkMulti-Server,multi-port supportPlugin system through Dll, which has strong expansibilitySuper tiny client size (about 40~50K)Data transform with msgpack (better than JSON and other formats)Logging system recording all events Functions Remote shellRemote desktopRemote cameraRegistry EditorFile managementProcess managementNetstatRemote recordingProcess notificationSend fileInject fileDownload...

Wpscvn : Wpscvn Is A Tool For Pentesters, Website Owner To Test If Their Websites Had Some Vulnerable Plugins Or Themes

0

wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes The author does not hold any responsibility for the bad use of this tool, remember that attacking targets without prior consent is illegal and punished by law. Requires Python 3 Usage python3 script.py http://siten Download

Sx : Fast, Modern, Easy-To-Use Network Scanner

0

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. Features ⚡ 30x times faster than nmapARP scan: Scan your local networks to detect live devicesICMP scan: Use advanced ICMP scanning techniques to detect live hosts and firewall rulesTCP SYN scan: Traditional half-open scan to find...

RemotePotato0 : Just Another “Won’t Fix” Windows Privilege Escalation From User To Domain Admin

0

RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Briefly: It abuses the DCOM activation service and trigger an NTLM authentication of the user currently logged on in the target machine. It is required you have a shell in session 0 (e.g. WinRm shell or SSH shell) and that a privileged user...

Nexfil : OSINT Tool For Finding Profiles By Username

0

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. If you like my work please star this project :D If you find any errors or false positives or if you want to suggest...

Security Scorecards : Security Health Metrics For Open Source

0

Security Scorecards is a tool for Security Health Metrics For Open Source. Motivation A short motivational video clip to inspire us: https://youtu.be/rDMMYT3vkTk "You passed! All D's ... and an A!" Goals Automate analysis and trust decisions on the security posture of open source projects.Use this data to proactively improve the security posture of the critical projects the world depends on. Scorecard Checks The following checks are all...

WFH : Windows Feature Hunter 2021

0

Windows Feature Hunter (WFH) is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically identify potential Dynamic Linked Library (DLL) sideloading and Component Object Model (COM) hijacking opportunities at scale. DLL sideloading utilizes the Windows side-by-side (WinSXS) assembly...

Ipa-Medit : Memory Search And Patch Tool For Resigned Ipa Without Jailbreak

0

Ipa-medit is a memory search and patch tool for resigned ipa without jailbreak. It was created for mobile game security testing. Motivation Memory modification is the easiest way to cheat in games, it is one of the items to be checked in the security test. There are also cheat tools that can be used casually like GameGem and iGameGuardian. However, there...