Password Attacks – James Eduard

Hacking - Information Gathering - Linux - Networking - Password Attacks - Pentesting Tools - Vulnerability Scanner - Wireless Attacks - Wireless Network

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically

August 31, 2019

[vc_row][vc_column][vc_column_text]Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcatch (running with a couple of WiFi…

Continue Reading

Related Posts

WiFi-Pumpkin – Framework For Rogue Wi-Fi Access Point Attack
January 19, 2016

Zero Days – Security Leaks for Sale ( Documentary by VPRO Backlight)
October 24, 2015

Hidden-Tear – An OpenSource Ransomware-like File Crypter
August 20, 2015
Information Gathering - Password Attacks

Evilginx – MITM Attack Framework anAdvanced Phishing with Two-factor Authentication Bypass

April 18, 2017

Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It’s core runs on Nginx HTTP server, which utilizes proxy_pass and sub_filter to proxy and modify HTTP content, while intercepting traffic between client and server. Usage usage: evilginx_parser.py [-h] -i INPUT -o OUTDIR…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Sn1per – Automated Pentest Recon Scanner
January 5, 2018

FSociety Hacking Tools Pack – A Penetration Testing Framework
January 2, 2018
Information Gathering - Password Attacks - Security Scanner - Web Application

THC-Hydra 8.2 Released

June 27, 2016

When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more than 50 protocols, including telnet, ftp, http, https, smb, several databases, and much more. Like THC Amap this release is from the fine folks…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Sn1per – Automated Pentest Recon Scanner
January 5, 2018

FSociety Hacking Tools Pack – A Penetration Testing Framework
January 2, 2018
Information Gathering - Password Attacks - Pentesting Tools - Web Application

Weeman v1.7 – HTTP Server for Phishing

May 3, 2016

HTTP server for phishing in python. (and framework) Usually you will want to run Weeman with DNS spoof attack. (see dsniff, ettercap). Press 1.7 – is out 25-03-2016 Added profiles Weeman framework 0.1 is out !!! Added command line options. Beautifulsoup dependency removed. Weeman will do the following steps: Create…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Sn1per – Automated Pentest Recon Scanner
January 5, 2018

FSociety Hacking Tools Pack – A Penetration Testing Framework
January 2, 2018
Password Attacks - Pentesting Tools - Python - Web Application

WordPress XML RPC Brute Force Exploit by 1N3

October 19, 2015

WordPress XML-RPC Brute Force Amplification PoC by 1N3, this is a small PoC exploit to launch a brute force amplification attack on affected WordPress sites. USAGE: ./wp-xml-brute http://target.com/xmlrpc.php passwords.txt #!/usr/bin/python # WordPress XML-RPC Brute Force Amplification PoC by 1N3 # Last Updated: 20151018 # https://crowdshield.com # # ABOUT: This exploit…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Evilginx – MITM Attack Framework anAdvanced Phishing with Two-factor Authentication Bypass
April 18, 2017

THC-Hydra 8.2 Released
June 27, 2016
Information Gathering - Password Attacks - Web Application

Weeman – HTTP Server for Phishing

October 3, 2015

Weeman – HTTP server for phishing in python. Weeman has support for most of the (bigest) websites. Usually you will want run Weeman with DNS spoof attack. (see dsniff, ettercap). Weeman will do the following steps: Create fake html page. Wait for clients Grab the data (POST). Try to login…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Sn1per – Automated Pentest Recon Scanner
January 5, 2018

FSociety Hacking Tools Pack – A Penetration Testing Framework
January 2, 2018
Information Gathering - Password Attacks - Pentesting Tools

BruteX v1.2 was Released!

September 17, 2015

Automatically brute force all services running on a target including: Open ports DNS domains Usernames Passwords USAGE: ./brutex target DEPENDENCIES: NMap Hydra SNMPWalk DNSEnum CHANGELOG: 20150915 – v1.2 adds dnsenum / removes DNSDict6 as no longer supported on Kali 2.0 20150904 – v1.2 removed wfuzz web file brute forcing as…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Sn1per – Automated Pentest Recon Scanner
January 5, 2018

FSociety Hacking Tools Pack – A Penetration Testing Framework
January 2, 2018
Information Gathering - Password Attacks - Pentesting Tools - Web Application

SPF – SpeedPhish Framework

August 19, 2015

SPF – SpeedPhish Framework -is a python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises. Requirements: dnspython twisted PhantomJS Usage: usage: spf.py [-h] [-f ] [-C ] [--all] [--test] [-e] [-g] [-s] [--simulate] [-w] [-W] [-d ] [-c <company's name>] [--ip ] [-v]…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Sn1per – Automated Pentest Recon Scanner
January 5, 2018

FSociety Hacking Tools Pack – A Penetration Testing Framework
January 2, 2018
Password Attacks

Passgen – Random character generator Crunch which attempts to solve cracking WPA/WPA2

July 24, 2015

Passgen is an alternative for the random character generator crunch which attempts to solve cracking WPA/WPA2 keys by randomizing the output opposed to generating a list like so, (aaaaaaaa, aaaaaaab, aaaaaac, etc). example usuage with aircrack-ng python passgen.py -l | sudo aircrack-ng --bssid 00:11:22:33:44:55 -w- WiFi.cap argument switches are as…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Evilginx – MITM Attack Framework anAdvanced Phishing with Two-factor Authentication Bypass
April 18, 2017

THC-Hydra 8.2 Released
June 27, 2016
Password Attacks

Cowrie – SSH Honeypot

July 4, 2015

Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen (desaster). Features Some interesting features: Fake filesystem with the ability to add/remove files. A full fake filesystem…

Continue Reading

Related Posts

Hashcatch – Capture Handshakes Of Nearby WiFi Networks Automatically
August 31, 2019

Evilginx – MITM Attack Framework anAdvanced Phishing with Two-factor Authentication Bypass
April 18, 2017

THC-Hydra 8.2 Released
June 27, 2016