WebDavC2 is a PoC of using the WebDAV protocol with PROPFIND only requests to serve as a C2 communication channel between an agent, runnin...
MASIGNCLEAN103
Showing posts with label Detection. Show all posts
Showing posts with label Detection. Show all posts
BootStomp - A Bootloader Vulnerability Finder
0
BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For mo...
arp-validator - Security Tool To Detect ARP Poisoning Attacks
0
Security Tool to detect arp poisoning attacks. Features Uses a faster approach in detection of arp poisoning attacks compared to passive app...
WhatWeb v0.4.9 - Next Generation Web Scanner
0
WhatWeb identifies websites. Its goal is to answer the question, “What is that Website?”. WhatWeb recognises web technologies including cont...
Amber - POC Reflective PE Packer
0
Amber is a proof of concept packer, it can pack regularly compiled PE files into reflective PE files that can be used as multi stage infecti...
DR.CHECKER - A Soundy Vulnerability Detection Tool for Linux Kernel Drivers
0
DR.CHECKER: A Soundy Vulnerability Detection Tool for Linux Kernel Drivers Tested on Ubuntu >= 14.04.5 LTS 1. Setup The implementation is...
EmbedInHTML - Embed and hide any file in an HTML file
0
What this tool does is taking a file ( any type of file ), encrypt it, and embed it into an HTML file as ressource, along with an automatic ...
WSC2 - A WebSocket C2 Tool
0
WSC2 is a PoC of using the WebSockets and a browser process to serve as a C2 communication channel between an agent, running on the target s...
PortEx - Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
0
PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly ...
SpookFlare - Meterpreter Loader Generator With Multiple Features For Bypassing Client-Side And Network-Side Countermeasures
0
SpookFlare has a different perspective to bypass security measures and it gives you the opportunity to bypass the endpoint countermeasures a...
ROC - Infineon RSA Vulnerability
0
This tool is related to ACM CCS 2017 conference paper #124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Mo...
TrevorC2 - Command and Control via Legitimate Behavior over HTTP
0
TrevorC2 is a client/server model for masking command and control through a normally browsable website. Detection becomes much harder as tim...
wig - WebApp Information Gatherer
0
wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applic...
Blazy - Modern Login Bruteforcer Which Also Tests For CSRF, Clickjacking, Cloudflare and WAF
0
Blazy is a modern login page bruteforcer. Features Easy target selections Smart form and error detection CSRF and Clickjacking Scanner Clou...
Subscribe to:
Posts (Atom)