Posts

Catchyou - FUD Win32 Msfvenom Payload Generator

Image
Fully Undetectable Win32 MSFVenom Payload Generator (meterpreter/shell reverse tcp) Author: github.com/thelinuxchoice/catchyou Twitter: twitter.com/linux_choice Please, don't upload to VirusTotal! Use https://antiscan.me Features: * Fully Undetectable Win32 MSFVenom Payload (meterpreter/shell reverse tcp) * Port Forwarding using ngrok * Tested: Win7/Win10 Requirements: * Metasploit/MSFVenom * mingw-w64: apt-get install mingw-w64 Forwarding requirements: * Ngrok Authtoken (for TCP Tunneling): Sign up at: https://ngrok.com/signup * Your authtoken is available on your dashboard: https://dashboard.ngrok.com * Install your auhtoken: ./ngrok authtoken Legal disclaimer: Usage of CatchYou for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program Usage: git clone https:/...

PayloadsAllTheThings - A List Of Useful Payloads And Bypass For Web Application Security And Pentest/CTF

Image
A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques ! Every section contains the following files, you can use the _template_vuln folder to create a new chapter: * README.md - vulnerability description and how to exploit it * Intruder - a set of files to give to Burp Intruder * Images - pictures for the README.md * Files - some files referenced in the README.md You might also like the Methodology and Resources folder : * Methodology and Resources * Active Directory Attack.md * Cloud - AWS Pentest.md * Cloud - Azure Pentest.md * Cobalt Strike - Cheatsheet.md * Linux - Persistence.md * Linux - Privilege Escalation.md * Metasploit - Cheatsheet.md * Methodology and enumeration.md * Network Pivoting Techniques.md * Network Discovery.md * Reverse Shell Cheatsheet.md * Subdomains Enumeration.md * Windows - Download and Execute.md * Windows - Mimikatz.md * Windows - Persistence.md * Windows - Post...

Exegol - Exegol Is A Kali Light Base With A Few Useful Additional Tools And Some Basic Configuration

Image
Exegol is a fully configured kali light base with a few useful additional tools (~50), a few useful resources (scripts and binaries for privesc, credential theft etc.) and some configuration (oh-my-zsh, history, aliases, colourized output for some tools). It can be used in pentest engagements and BugBounty. Exegol's original fate was to be a ready-to-hack docker in case of emergencies during engagements. It is now an environnement my team and I use in day to day engagements. Quick start The project is on Docker Hub, you don't need to clone this git. * First set the following aliases in your bashrc/zshrc/whateverrc. alias exegol-update='docker pull nwodtuhs/exegol' alias exegol-build='docker build --tag nwodtuhs/exegol /PATH/TO/Exegol/' alias exegol-run='docker run --interactive --tty --detach --network host --volume /PATH/TO/Exegol/shared-volume:/share --name exegol nwodtuhs/exegol' alias exegol-shell='docker exec -it exegol zsh' alias exegol...

GDBFrontend - An Easy, Flexible And Extensionable GUI Debugger

Image
GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Deb Package (Debian / Ubuntu / KDE Neon) You can install GDBFrontend via deb package for Debian-based distributions. You can install it from following commands: echo "deb [trusted=yes] https://oguzhaneroglu.com/deb/ ./" | sudo tee -a /etc/apt/sources.list > /dev/null sudo apt update sudo apt install gdbfrontendAfter installing with APT, you will get updates for new releases on APT upgrade. You can get upgrades with following commands: sudo apt update sudo apt upgrade gdbfrontendand you can run it: gdbfrontend Running From GIT You can download latest source and run it. Requirements * GDB => 8.2 (with python3) * python3 * tmux You can run gdb-frontend with following commands: git clone https://github.com/rohanrhu/gdb-frontend.git gdb-frontend cd gdb-frontend ./gdbfrontendand you can open it with: http://127.0.0.1:5551/terminal/or without terminal: http://127.0.0.1:5551/You can open GDB s...