The Latest Infosec News, Tools, and Exploits – Got Root?
Introduction Cookie door is a php backdoor that allows you to execute remote shell command on the webserver. Commands are sent via cookie. How to use You can place the payload.php script code inside another […]
Doxycannon takes a pool of OpenVPN files and creates a Docker container for each one. After a successful VPN connection, each container spawns a SOCKS5 proxy server and binds it to a port on the […]
Python Script for Telegram Bot is specially builded for pentest & bug bounty. It’s like a telegram shell. You will be notified when your task(command line) is finished with results. This bot make long time […]
SDF has been created to automate search task of hidden directories and files on server. It’s multithreaded btw. Simple example: Short help Extended help You can use one url or file with list of urls: […]
Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking .Net assemblies. The hook is performed via CLR Profiler API. Work In Progress […]
Jack Web Scraper JWS it’s a tool that allows you to extract the text from a web page to later use it for password cracking / bruteforcing. Configure Run the configure.sh script to create a […]
Key features Pattern matching based XSS scanning Detect alert confirm prompt event on headless browser (with Selenium) Testing request/response for XSS protection bypass and reflected(or all) params Reflected Params All params(for blind xss, anytings) Filtered […]
enum4linux-ng.py is a rewrite of Mark Lowe’s (former Portcullis Labs now CiscoCXSecurityLabs) enum4linux.pl, a tool for enumerating information from Windows and Samba systems, aimed for security professionals and CTF player. The tool is mainly a […]
Operation Once run from the console, ravage checks all the system paths with a valid extension, adds them to a list, generates a text file with the affected items on the machine, and proceeds to […]
Disclaimer This project should be used for authorized testing or educational purposes only. The main objective behind creating this offensive project was to aid security researchers and to enhance the understanding of commercial HTTP loader […]
