WarChild – Denial Of Service Testing Suite Made For Analyzing
Warchild is a denial of service testing suite made for analyzing the strength of your website against different kinds of denial of service attacks you will be facing which are mainly organized by crooks to cause damage to your website. WarChild Installation For Installing the required modules just run the following command in your terminal :) ...
Aron – A GO Script For Finding Hidden GET & POST Parameters
Aron is a simple GO script for finding hidden GET & POST parameters with bruteforce. Aron Installation $ git clone https://github.com/m4ll0k/Aron.git aron $ cd aron $ go get github.com/m4ll0k/printer # now check if $GOPATH is set $ go env | grep -i gopath # if $GOPATH not set, try with: $ export GOPATH=$HOME/go $ go run aron.go # OR $ go build aron.go $ cp aron /usr/bin/ $ aron Also Read...
Homoglyphs – Get Similar Letters, Convert To ASCII, Detect Possible Languages & UTF-8 Group
Homoglyphs is used to get similar letters, convert to ASCII, detect possible languages and UTF-8 group. Also can say python library for getting it and converting to ASCII. Features It's smarter version of confusable_homoglyphs: Autodect or manual choosing category (aliases from ISO 15924). Auto or manual load only needed alphabets in memory. Converting to ASCII. More configurable. More stable. Also Read Whatsapp_Automation...
CertCrunchy – Silly Recon Tool That Uses Data From SSL Certificates To Find Potential HostNames
CertCrunchy is just a silly python script that either retrieves SSL Certificate based data from online sources, currently https://crt.sh/, https://certdb.com/, https://sslmate.com/certspotter/ and https://censys.io or given a IP range it will attempt to extract host information from SSL Certificates. If you want to use Censys.io you need to register for a API key. Also Read Hcxdumptool – Small Tool To Capture...
Hcxdumptool – Small Tool To Capture Packets From WLAN Devices
Hcxdumptool is small tool to capture packets from wlan devices. After capturing, upload the "uncleaned" cap here to see if your application or the client is vulnerable by using common wordlists. Convert the cap to hccapx and/or to WPA-PMKID-PBKDF2 hashline (16800) with hcxpcaptool (hcxtools) and check if wlan-key or plainmasterkey was transmitted unencrypted. Stand-alone binary - designed to run on...
Whatsapp_Automation : Collection Of APIs Interact With WhatsApp Running In An Android Emulator
Whatsapp_Automation is a collection of APIs that interact with WhatsApp messenger running in an Android emulator, allowing developers to build projects that automate sending and receiving messages, adding new contacts and broadcasting messages multiple contacts. The project uses Selinium, Appium, Python and Android Virtual Device Emulator. Whatsapp_Automation Requirements java Android Studio & Android Emulator setup with latest Android version Appium...
Fragmentation Enables Massive Data Security Voids
A recent study stated that a large percentile of data security professionals believe that their data security strategy is mature enough to ward off data threats. Yet, a greater percentage reported persistent challenges in safeguarding the same data. This fragmented approach to data security according to the study aggravates weaknesses and challenges persistent data protection. The study concluded that organizations...
Apfell – A MacOS, Post-Exploit, Red Teaming Framework
Apfell is a macOS, post-exploit, red teaming framework built with python3 and JavaScript. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout mac and linux based red teaming. This is a work-in-progress as I have free time, so please bear with me. Also Read Firebase – Tool To Exploiting Misconfigured Firebase Databases Apfell Installation Get...
Firebase – Tool To Exploiting Misconfigured Firebase Databases
Firebase exploiting tool is exploiting misconfigured firebase databases. Disclaimer: The provided software is meant for educational purposes only. Use this at your own discretion, the creator cannot be held responsible for any damages caused. Please, use responsibly! Prerequisites Non-standard python modules: dnsdumpster bs4 requests Also Read The Android Application Developer Guide: Converting an iOS App to Android Firebase Installation If the following commands run successfully, you...
Remote-Desktop-Caching : Recover Old RDP (MSTSC) Session Information In The Form Of Broken PNG Files
Remote-Desktop-Caching tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is...