Efficient And Advanced Man In The Middle Framework Xerosploit is a penetration testing toolkit whose goal is to perform man in the middle attacks for testing purposes. It brings various modules that allow to realise efficient attacks, and also allows to carry out denial of service attacks and port scanning. Read more…
Tool For Man-In-The-Middle Attacks Against SSL/TLS Encrypted Network Connections SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is designed to transparently terminate connections that are redirected to it using Read more…
Interactive Shell Command Improves manipulation and sending commands to the vulnerable server using a shell. Usage: python Struts2Shell.py Download
Analyze a Web-Based Network Traffic to Detect Central Command and Control (C&C) Servers and Malicious Site Squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control (C&C) servers and Malicious site, using Squid proxy server and Spamhaus. Install Ubuntu 16.04 Clone this repo Read more…
The Hacker’s ToolBox PloitKit is a Python based GUI tool designed as one-stop for all other softwares. I was facing these kinds of problem, when I need to switch to different system, or I lost my pen-drive. I have to go to google, and search every tool and download Read more…
A Framework That Creates An Advanced FUD Dropper With Some Tricks Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a dropper that bypass most AVs and have some tricks 😉 Read more…
A smart gateway to stop hackers and Malware attacks Motivation Cyber attacks are on the raise. Hacker and cyber criminals are continuously improving their methods and building new tools and Malware with the purpose of hacking your network, spying on you and stealing valuable data. Recently a new business model Read more…
Analyse SQL injection attempts in web server logs reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In Read more…
A Full-Fledged Phishing Framework To Manage All Phishing Engagements FiercePhish FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more. The features will continue to be expanded and will include website spoofing, click Read more…
Web And Mobile Application Security Training Platform OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices Read more…