Longtongue : Customized Password/Passphrase List Inputting Target Info
Longtongue is a customized password/passphrase list inputting target info. Installation git clone https://github.com/edoardottt/longtongue.gitcd longtonguepython3 longtongue.py Usage Usage: longtongue.py Customized Password/Passphrase List inputting Target InfoOptional Arguments:-h, --help show this help message and exit-p, --person Set the target to be a person-c, --company Set the target to be a company-v, --version Show the version of this program-l, --leet Add also complete...
Solarflare : SolarWinds Orion Account Audit / Password Dumping Utility
Solarflare is a Credential Dumping Tool for SolarWinds Orion. ============================================ | Collecting RabbitMQ Erlang Cookie | Erlang Cookie: abcdefg12456789abcde ============================================ | Collecting SolarWinds Certificate | SolarWinds Orion Certificate Found! | Subject Name: CN=SolarWinds-Orion | Thumbprint : BE85C6C3AACA8840E166187B6AB8C6BA9DA8DE80 | ...
Exif-Gps-Tracer : A Python Script Which Allows You To Parse GeoLocation Data From Your Image Files
Exif-Gps-Tracer is a python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps. Prerequisite To run this script fluently , (1) You should have Google Maps API (2) You should enable Map JavaScript API in Console To get an API key,See this documentation......
UhOh365 : A Script That Can See If An Email Address Is Valid In Office365
UhOh365 is a script that can see if an email address is valid in Office365. This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't. Microsoft does not consider "email enumeration" a vulnerability, so this is taking advantage of a "feature". There are a couple...
Sarenka : OSINT Tool Data From Services Like Shodan, Censys
SARENKA is an Open Source Intelligence (OSINT) tool which helps you obtaining and understanding Attack Surface. The main goal is to gathering infromation from search engines for Internet-connected devices (https://censys.io/, https://www.shodan.io/). It scraps data about Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE) and also has database where CVEs are mapped to CWE. It returns data about local machine -...
MaskPhish : Give A Mask To Phishing URL
MaskPhish is a simple script to hide phishing URL under a normal looking URL(google.com or facebook.com). Installing (Tested on Kali Linux, Termux & Ubuntu): git clone https://github.com/jaykali/maskphish cd maskphish bash maskphish.sh Detailed Article: https://www.kalilinux.in/2020/07/how-to-hide-phishing-link.html Start Disscussion On MaskPhish Want to discuss about MaskPhish with us? (Click Here). Screenshot Download
Drow : Injects Code Into ELF Executables Post-Build
Drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables (post-build). It takes unmodified ELF executables as input and exports a modified ELF containing an embedded user-supplied payload that executes at runtime. Drow takes the following steps to create the new patched ELF:Map in the umodified target ELF executable and the user-supplied...
EvtMute : Apply A Filter To The Events Being Reported By Windows Event Logging
EvtMute is a tool that allows you to offensively use YARA to apply a filter to the events being reported by windows event logging. Usage Grap the latest version from here. EvtMuteHook.dll contains the core functionality, once it is injected it will apply a temporary filter which will allow all events to be reported, this filter can be dynamically updated without...
How to Get Most Out of Amazon Logistics
The purpose of launching Amazon Logistics back in 2015 was to enhance customer satisfaction. The aim was to lessen the shipping time and ultimate protection of the goods. When it comes to sellers, the results vary from seller to seller. Those who utilize services like Amazon Logistics Tracking wisely most likely build a better reputation. To understand it better, let's discuss what...
XSS-Scanner : Scanner That Detects Cross-Site Scripting Vulnerabilities In Website
XSS-Scanner is a cross-site scripting (XSS) is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The scanner gets a link from the user and scan the website for XSS vulnerability by injecting malicious scripts at the...