Category: Brute-force

Windows10

Black Window 10 v2

November 12, 2018 January 8, 2019by D4RkN

Black Window Enterprise 10 Codename : Polemos Black Window 10 Enterprise is the first windows based penetration testing distribution with Linux integrated ! The system comes activated with a digital license for Windows enterprise! It supports windows apps and Linux apps, GUI and terminal apps! It comes with a tone off hacking tools plus all the tools that are included with the latest release of Cerberus Linux! It has managed to implement Cerberus os within windows. Offers the stability of a windows system…

bypass-firewalls-by-DNS-history – Firewall Bypass Script Based On DNS History Records

January 10, 2019by Black Hat Sec

This script will try to find:the direct IP address of a server behind a firewall like Cloudflare, Incapsula, SUCURI ...an old server which still running the same (inactive and unmaintained) website, not receiving active traffic because the A DNS record is not pointing towards it. Because it's an outdated and unmaintained website version of the current active one, it is likely vulnerable for various exploits. It might be easier to find SQL injections and access the database of the old website and abuse this…

Brute Force Attack ⁄ Brute-force ⁄ Hediye ⁄ Mac ⁄ NEW TOOLS ⁄ Wordlist

Hediye – Hash Generator & Cracker Online Offline

January 9, 2019by Black Hat Sec

Hash Generator & Cracker Online Offline suported hash:md5sha1sha224sha256sha384sha512Install NoteClone the repository:git clone go inside:cd hediye/use examples:python3 hediye.py -k Key / For --> Generate Hash (md5, sha1, sha224, sha256, sha384, sha512)python3 hediye.py -v HASH -f Wordlist / For --> Brute Force Attackpython3 hediye.py -n HASH / For --> Online SearchGenerate Hashpython3 hediye.py -k 4617165Brute Force AttackOnline SearchDownload Hediye

Auditing SSH ⁄ Brute-force ⁄ NEW TOOLS ⁄ Scan ⁄ SSH ⁄ SSH Auditor ⁄ ssh security ⁄ SSH server

SSH Auditor – The Best Way To Scan For Weak Ssh Passwords On Your Network

November 18, 2018by Black Hat Sec

The Best Way To Scan For Weak Ssh Passwords On Your NetworkFeaturesssh-auditor will automatically:Re-check all known hosts as new credentials are added. It will only check the new credentials.Queue a full credential scan on any new host discovered.Queue a full credential scan on any known host whose ssh version or key fingerprint changes.Attempt command execution as well as attempt to tunnel a TCP connection.Re-check each credential using a per credential scan_interval - default 14 days.It's designed so that you can run ssh-auditor discover +…

Brute-force ⁄ Fingerprinting ⁄ HASSH ⁄ NEW TOOLS ⁄ SSH ⁄ SSH Client ⁄ SSH Honeypot ⁄ SSH server

HASSH – A Network Fingerprinting Standard Which Can Be Used To Identify Specific Client And Server SSH Implementations

November 17, 2018by Black Hat Sec

"HASSH" is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of an MD5 fingerprint.What can HASSH help with:Use in highly controlled, well understood environments, where any fingerprints outside of a known good set are alertable.It is possible to detect, control and investigate brute force or Cred Stuffing password attempts at a higher level of granularity than IP Source - which may be impacted by…

Brute-force ⁄ Captive Portal ⁄ Evil Twin ⁄ Kali ⁄ Mac ⁄ Mac Changer ⁄ NEW TOOLS ⁄ Pcap ⁄ Penetration Test ⁄ SniffAir ⁄ TP-LINK ⁄ WPA2

SniffAir – A Framework For Wireless Pentesting

November 5, 2018by Black Hat Sec

SniffAir is an open-source wireless security framework which provides the ability to easily parse passively collected wireless data as well as launch sophisticated wireless attacks. SniffAir takes care of the hassle associated with managing large or multiple pcap files while thoroughly cross-examining and analyzing the traffic, looking for potential security flaws. Along with the prebuilt queries, SniffAir allows users to create custom queries for analyzing the wireless data stored in the backend SQL database. SniffAir is built on the concept of using these queries…

badKarma ⁄ Brute-force ⁄ Incident response ⁄ Information Gathering ⁄ Network Security ⁄ NEW TOOLS ⁄ Nmap ⁄ Offensive Security ⁄ penetration testing ⁄ Pentest Tool ⁄ Python3 ⁄ Scan ⁄ Security Audit

badKarma – Advanced Network Reconnaissance Toolkit

August 28, 2018by Black Hat Sec

badKarma is a python3 GTK+ network infrastructure penetration testing toolkit.badKarma aim to help the tester in all the penetration testing phases (information gathering, vulnerability assessment,exploitation,post-exploitation and reporting). It allow the tester to save time by having point-and-click access to their toolkit and interacte with them through GUIs or Terminals, also every task is logged under a sqlite database in order to help during the reporting phase or in a incident response scenario.It is also available a proxychains switch that let everything go through proxies,…

Brute-force ⁄ GNU ⁄ Hash ⁄ Hash Cracker ⁄ Mac ⁄ NEW TOOLS ⁄ Password Cracker ⁄ Password Cracking ⁄ Password Recovery

Hashcat v4.2.1 – World’s Fastest and Most Advanced Password Recovery Utility

August 12, 2018by Black Hat Sec

hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 200 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and OSX, and has facilities to help enable distributed password cracking. Installation Download the latest release and unpack it in the desired location. Please remember to use 7z x when unpacking the archive from the command line to ensure full file paths remain intact.GPU Driver requirements:AMD GPUs on Windows…

Brute-force ⁄ CTF Tool ⁄ DATA ⁄ Hidden ⁄ Kali ⁄ Kali Linux ⁄ NEW TOOLS ⁄ Parameter ⁄ penetration testing ⁄ Stegcracker ⁄ Steghide ⁄ Wordlist

StegCracker – Steganography Brute-Force Utility To Uncover Hidden Data Inside Files

August 1, 2018by Black Hat Sec

Steganography brute-force utility to uncover hidden data inside files.UsageUsing stegcracker is simple, pass a file to it as it's first parameter and optionally pass the path to a wordlist of passwords to try as it's second parameter. If this is not set it will default to the rockyou.txt password file which ships with Kali Linux or can be downloaded here.$ stegcracker <file> [<wordlist>]InstallationTo install the program, follow these steps:$ sudo apt-get install steghide -y$ sudo curl > /bin/stegcracker$ sudo chmod +x /bin/stegcrackerDownload StegCracker

Autocrack ⁄ Brute-force ⁄ Masks ⁄ NEW TOOLS ⁄ Parameter ⁄ Wordlists ⁄ Wrapper

Autocrack – Hashcat Wrapper To Help Automate The Cracking Process

July 9, 2018by Black Hat Sec

This python script is a Hashcat () wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks.Autocrack uses Python 3, which is usually installed already in various Linux distributions. To install Python 3 in OS X, follow the instructions here: sure to set the path variables at the beginning of the script.usage: autocrack.py [-h] [-b NUM]…