USAGE: sh massbleed.sh [CIDR|IP] [single|port|subnet] [port] [proxy] About: -This script has four main functions with the ability to proxy all connections: To mass scan any CIDR range for OpenSSL vulnerabilities via port 443/tcp (https) (example: sh massbleed.sh 192.168.0.0/16) To scan any CIDR range for OpenSSL vulnerabilities via any custom port…
-
-
Bluto – DNS Recon, DNS Zone Transfer, and Email Enumeration
BLUTO DNS recon | Brute forcer | DNS Zone Transfer | Email Enumeration The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto…
-
InfernalTwin – This Is Evil Twin Attack Automated [Wireless Hacking]
InfernalTwin – This Is Evil Twin Attack Automated [Wireless Hacking] This tool is created to aid the penetration testers in assessing wireless security. Author is not responsible for misuse. Please read instructions thoroughly. Usage: python InfernalWireless.py (from the same folder where your code exists) Note: Please make sure to run…
-
ARDT – Akamai Reflective DDoS Tool
Akamai Reflective DDoS Tool -Attack the origin host behind the Akamai Edge hosts and bypass the DDoS protection offered by Akamai services. How it works: Based off the research done at NCC: (https://dl.packetstormsecurity.net/papers/attack/the_pentesters_guide_to_akamai.pdf) Akamai boast around 100,000 edge nodes around the world which offer load balancing, web application firewall, caching…
-
ZIB-Trojan – The Open Tor Botnet
General information and instructions. The Open Tor Botnet requires the installation and configuration of bitcoind, however I neglect to detail this here out of a lack of time. This bot-net is fully undetectable and bypasses all antivirus through running on top of Python27’s pyinstaller, which is used for many non-Trojan…
-
Powercat – The Powershell Version [Netcat]
Powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded when powershell starts. Load The Function From Downloaded .ps1 File: . .\powercat.ps1 Load The Function From…
-
Zero Days – Security Leaks for Sale ( Documentary by VPRO Backlight)
Zero Days – Security Leaks for Sale ( Documentary by VPRO Backlight) Zero days is a 49-minute documentary about hacking and trade in the 0 -days produced by VPRO the Dutch public broadcasting organization . The documentary has been uploaded to Youtube in English , There is new gold to…
-
Wifi Arsenal – A pack of various usefull/useless tools for 802.11 hacking
WiFi arsenal is a pack of various usefull/useless tools for 802.11 hacking Short description: P0cL4bs/3vilTwinAttacker -Framework for Rogue Wi-Fi Access Point Attack ewa/802.11-data – Formulas and constants from the 802.11 standards, in machine-readable formats CTU-IIG/802.11p-wireless-regdb – Wireless regulatory database for CRDA flupzor/80211-fun – Fun with 80211 frames. mcgrof/acs – Automatic…
-
xcat – Automate XPath injection attacks to retrieve documents
XCat is a command line program that aides in the exploitation of blind XPath injection vulnerabilities. It can be used to retrieve the whole XML document being processed by a vulnerable XPath query, read arbitrary files on the hosts filesystem and utilize out of bound HTTP requests to make the…
-
WordPress XML RPC Brute Force Exploit by 1N3
WordPress XML-RPC Brute Force Amplification PoC by 1N3, this is a small PoC exploit to launch a brute force amplification attack on affected WordPress sites. USAGE: ./wp-xml-brute http://target.com/xmlrpc.php passwords.txt #!/usr/bin/python # WordPress XML-RPC Brute Force Amplification PoC by 1N3 # Last Updated: 20151018 # https://crowdshield.com # # ABOUT: This exploit…
