Stealth post-exploitation framework PhpSploit is a remote control framework, aiming to provide a stealth interactive shell-like connection over HTTP between client and web server. It is a post-exploitation tool capable to maintain access to a compromised web server for privilege escalation purposes. Overview The obfuscated communication is accomplished Read more…
SAM database (Dumping and Cracking the local user accounts) Let’s talk about the hash crack through post / hashdump and john (john the ripper) of the Metasploit module. Once the meterpreter shell is injected and driven into the target pc, the shell connection is maintained. Get meterpreter session 2. Privilege Read more…
Brutesploit BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and can be used in CTF for manipulation,combine,transform and permutation some words or file text :p i wrote this just for fun and Read more…
Windows Kung Fu Command Line Enable RDP reg add “hklm\system\currentcontrolset\control\terminal server” /f /v fDenyTSConnections /t REG_DWORD /d 0 netsh firewall set service remoteadmin enable netsh firewall set service remotedesktop enable View user on group net localgroup Users net localgroup Administrators search all .doc file dir/s *.doc Start a new CMD Read more…
Brute Force SMB Share and get shell Introduce SMB: Short for Server Message Block, SMB is a common network communications method used on Microsoft operating systems allowing those computers to communicate with other SMB computers. Linux and Unix computers can find other computers that respond to SMB requests using Read more…
MalwareSearch A Command Line Tool To Find Malwares Tool developed for searching malwares at openmalware.org by command line, allowing specific malware download by shell. Soon we’ll input more sources like MalShare, MalwareBlacklist, Malware.lu’s AVCaesar and Malwr. Usage Optional Arguments: $ malwaresearch.py [–h HELP] [-f FIND] [-w WRITE] usage: malwaresearch.py Read more…
Interactive Shell Command Improves manipulation and sending commands to the vulnerable server using a shell. Usage: python Struts2Shell.py Download