Donut-Decryptor : Unmasking Binary Secrets

Navigating the maze of binary obfuscation? Meet the “Donut-Decryptor”, a tool tailored to decode the elusive Donut obfuscation. Dive in to unravel its capabilities and bring clarity to concealed code. Beyond mere decryption, it’s a spotlight in the shadowy corridors of cybersecurity. A must-have for those battling coded enigmas. A configuration and module extractor for …

EXOCET : AV-evading, Undetectable, Payload Delivery Tool

EXOCET is superior to Metasploit’s “Evasive Payloads” modules as EXOCET uses AES-256 in GCM Mode (Galois/Counter Mode). Metasploit’s Evasion Payloads uses a easy to detect RC4 encryption. While RC4 can decrypt faster, AES-256 is much more difficult to ascertain the intent of the malware. However, it is possible to use Metasploit to build a Evasive …

Bantam : A PHP Backdoor Management And Generation tool/C2 Featuring End To End Encrypted Payload Streaming Designed To Bypass WAF, IDS, SIEM Systems

Bantam is an advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM systems. It incorporates several payload randomization and obfuscation techniques to help prevent detection …

DNSStager : Hide Your Payload In DNS

DNSStager is an open-source project based on Python used to hide and transfer your payload using DNS. DNSStager will create a malicious DNS server that handles DNS requests to your domain and return your payload as a response to specific record requests such as AAAA or TXT records after splitting it into chunks and encoding the payload using different …

ScareCrow : Payload Creation Framework Designed Around EDR Bypass

ScareCrow is a payload creation framework for generating loaders for the use of side loading (not injection) into a legitimate Windows process (bypassing Application Whitelisting controls). Once the DLL loader is loaded into memory, utilizing a technique to flush an EDR’s hook out the system DLLs running in the process’s memory. This works because we …

Zin : A Payload Injector For Bugbounties Written In Go

Zin is a payload Injector For Bugbounties Written In Go. Features Inject multiple payloads into all parameters Inject single payloads into all parameters Saves responses into output folder Displays Status Code & Response Length Can grep for patterns in the response Really fast Easy to setup Install $ go get -u github.com/ethicalhackingplayground/Zin New Features Pattern …

SNOWCRASH – A Polyglot Payload Generator

SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user (in this case combined Bash and Powershell code) is embedded into a single polyglot template, which is platform-agnostic. There are few payloads available, including command execution, reverse shell establishment, binary execution and some more :> Basic …

Getdroid : FUD Android Payload & Listener

Getdroid is a FUD Android payload and listener. Requirements (Android-SDK, APKSinger) apt-get install android-sdk apksigner -y Usage git clone https://github.com/thelinuxchoice/getdroid cd getdroid bash getdroid.sh Also Read – Kali Linux 2020.2 Release – Penetration Testing and Ethical Hacking Linux Distribution Disclaimer Usage of GetDroid for attacking targets without prior mutual consent is illegal. It’s the end …

RapidPayload : Framework Metasploit Payload Generator

Framework RapidPayload is a metasploit payload generator. Requirements OpenJDK 8 (JAVA) , or superiors versions . Metasploit Apktool Python3 Execution git clone https://github.com/AngelSecurityTeam/RapidPayload cd RapidPayloadbash install.sh python3 RapidPayload.py Also Read – InstaSave : Python Script To Download Images, Videos & Profile Pictures From Instagram AngelSecurityTeam