USAGE: sh massbleed.sh [CIDR|IP] [single|port|subnet] [port] [proxy] About: -This script has four main functions with the ability to proxy all connections: To mass scan any CIDR range for OpenSSL vulnerabilities via port 443/tcp (https) (example: sh massbleed.sh 192.168.0.0/16) To scan any CIDR range for OpenSSL vulnerabilities via any custom port…
-
-
ARDT – Akamai Reflective DDoS Tool
Akamai Reflective DDoS Tool -Attack the origin host behind the Akamai Edge hosts and bypass the DDoS protection offered by Akamai services. How it works: Based off the research done at NCC: (https://dl.packetstormsecurity.net/papers/attack/the_pentesters_guide_to_akamai.pdf) Akamai boast around 100,000 edge nodes around the world which offer load balancing, web application firewall, caching…
-
Wifi Arsenal – A pack of various usefull/useless tools for 802.11 hacking
WiFi arsenal is a pack of various usefull/useless tools for 802.11 hacking Short description: P0cL4bs/3vilTwinAttacker -Framework for Rogue Wi-Fi Access Point Attack ewa/802.11-data – Formulas and constants from the 802.11 standards, in machine-readable formats CTU-IIG/802.11p-wireless-regdb – Wireless regulatory database for CRDA flupzor/80211-fun – Fun with 80211 frames. mcgrof/acs – Automatic…
-
WordPress XML RPC Brute Force Exploit by 1N3
WordPress XML-RPC Brute Force Amplification PoC by 1N3, this is a small PoC exploit to launch a brute force amplification attack on affected WordPress sites. USAGE: ./wp-xml-brute http://target.com/xmlrpc.php passwords.txt #!/usr/bin/python # WordPress XML-RPC Brute Force Amplification PoC by 1N3 # Last Updated: 20151018 # https://crowdshield.com # # ABOUT: This exploit…
-
Heartbleed Scanner – Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)
Heartbleed Scanner – Network Scanner for OpenSSL Memory Leak (CVE-2014-0160) -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r parameter to…
-
DNSteal – DNS Exfiltration tool for stealthily sending files over DNS requests.
DNSteal – DNS Exfiltration tool This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. Below is an image showing an example of how to use: On the victim machine, you simply can do something like so: for b in…
-
BruteX v1.2 was Released!
Automatically brute force all services running on a target including: Open ports DNS domains Usernames Passwords USAGE: ./brutex target DEPENDENCIES: NMap Hydra SNMPWalk DNSEnum CHANGELOG: 20150915 – v1.2 adds dnsenum / removes DNSDict6 as no longer supported on Kali 2.0 20150904 – v1.2 removed wfuzz web file brute forcing as…
-
OWASP ZeroDay Cyber Research Shellcoder
OWASP ZCR Shellcoder is an open source software in python language which lets you generate customized shellcodes for listed operation systems. This software can be run on Windows/Linux&Unix/OSX and others OS under python 2.7.x. OWASP ZeroDay Cyber Research Shellcoder Usage: python shellcoder.py -h -h, --h, -help, --help => to see…
-
SPF – SpeedPhish Framework
SPF – SpeedPhish Framework -is a python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises. Requirements: dnspython twisted PhantomJS Usage: usage: spf.py [-h] [-f ] [-C ] [--all] [--test] [-e] [-g] [-s] [--simulate] [-w] [-W] [-d ] [-c <company's name>] [--ip ] [-v]…
-
Linux Reverse TCP Shell In Python
Python code that provides a reverse TCP shell.