exploitation – Cyber Sec Labs

Evasor – A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies

Black Hat Sec, May 3, 2021, NEW TOOLS, Post Exploitation, DLL Injection, Red Teams, Penetration Testing Tools, Bypass Applocker Policies, Evasor, Full Automated, exploitation, injection, microsoft, vulnerable, windows, 0

The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which gen...

N1QLMap – The Tool Exfiltrates Data From Couchbase Database By Exploiting N1QL Injection Vulnerabilities

Black Hat Sec, November 26, 2020, NEW TOOLS, NodeJS, SSRF, N1QLMap, exploitation, exploiting, python, requirements, 0

N1QLMap is an N1QL exploitation tool. Currently works with Couchbase database. The tool supports data extraction and performing SSRF attacks via CURL. More information can be found here: https://labs.f-secure.com/blog/n1ql-injection-kind-of-sql-inject...

PowerZure – PowerShell Framework To Assess Azure Security

Black Hat Sec, November 2, 2020, NEW TOOLS, Command Line, PowerZure, azure, cloud, exploitation, exploits, framework, infosec, microsoft, powershell, reconnaissance, security, windows, 0

For a list of functions, their usage, and more, check out https://powerzure.readthedocs.io What is PowerZure? PowerZure is a PowerShell project created to assess and exploit resources within Microsoft’s cloud platform, Azure. PowerZure was created o...

Mikrot8Over – Fast Exploitation Tool For Mikrotik RouterOS

Black Hat Sec, October 14, 2020, NEW TOOLS, Scan, Leaks, Mikrot8Over, automation, exploitation, python, mikrotik, routeros, 0

mikrot8over: Fast exploitation tool for Mikrotik RouterOS up to 6.38.4 This is reworked original Mikrotik Exploit. Added Python 2 compatibility and multithreading scan features.Python version Utility was tested on a python2.6, python2.7, python3.*...

Ghost Framework – An Android Post Exploitation Framework That Uses An Android Debug Bridge To Remotely Access A n Android Device

Black Hat Sec, March 6, 2020, Kali Linux, NEW TOOLS, Remote Access, Exploitation Framework, Post Exploitation, Android RAT, Android Debug Bridge, Android Exploit, Android Hacking, Ghost Framework, Remote Administration, Remote Shell, android, exploitation, framework, ghost, debug, 0

Ghost Framework is an Android post exploitation framework that uses anAndroid Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.Getting startedGhost installati...

ABD – Course Materials For Advanced Binary Deobfuscation

Black Hat Sec, February 26, 2020, NEW TOOLS, Binary Exploitation, Binary Analysis, Symbolic Execution, Obfuscated Code, Deobfuscation, ABD, exploitation, obfuscation, 0

Advanced Binary DeobfuscationThis repository contains the course materials of Advanced Binary Deobfuscation at the Global Cybersecurity Camp (GCC) Tokyo in 2020.Course AbstractReverse engineering is not easy, especially if a binary code is obfuscated. ...

Corsy v1.0 – CORS Misconfiguration Scanner

Black Hat Sec, January 21, 2020, NEW TOOLS, Misconfiguration, Scans, Corsy, CORS, CORS Misconfiguration Scanner, CORS Scanner, SQL Vulnerability Scanner, exploitation, python, 0

Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations.RequirementsCorsy only works with Python 3 and has the following depencies:tldrequestsTo install these dependencies, navigate to Corsy directory and execu...

RFCpwn – An Enumeration And Exploitation Toolkit Using RFC Calls To SAP

Black Hat Sec, January 7, 2020, NEW TOOLS, Passcode, RFCpwn, enumeration, exploitation, toolkit, impacket, 0

An SAP enumeration and exploitation toolkit using SAP RFC callsThis is a toolkit for demonstrating the impact of compromised service accounts.This PoC is not for use in production environments, no guarantee of stability or support.RFCpwn relies on the ...

Exploitivator – Automate Metasploit Scanning And Exploitation

Black Hat Sec, December 13, 2019, NEW TOOLS, Scripts, PostgreSQL, Scan, Kali, Nmap, Command Line, Scans, Exploitivator, exploitation, metasploit, msfconsole, payload, python, scanning, vulnerable, 0

This has only been tested on Kali.It depends on the msfrpc module for Python, described in detail here: https://www.trustwave.com/Resources/SpiderLabs-Blog/Scripting-Metasploit-using-MSGRPC/Install the necessary Kali packages and the PostgreSQL gem fo...

LinPwn – Interactive Post Exploitation Tool

Black Hat Sec, October 29, 2019, NEW TOOLS, Privilege Escalation, Post Exploitation, LinPwn, Linux Security, enumeration, exploitation, linux, 0

LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation.ConnectionSet your IP and port you want it to connect to in the Connection class.Place the LinPwn binary on the target machine.Run nc -lvp PORT...

Evasor – A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies

N1QLMap – The Tool Exfiltrates Data From Couchbase Database By Exploiting N1QL Injection Vulnerabilities

Mikrot8Over – Fast Exploitation Tool For Mikrotik RouterOS

Ghost Framework – An Android Post Exploitation Framework That Uses An Android Debug Bridge To Remotely Access A n Android Device

ABD – Course Materials For Advanced Binary Deobfuscation

Corsy v1.0 – CORS Misconfiguration Scanner

RFCpwn – An Enumeration And Exploitation Toolkit Using RFC Calls To SAP

Exploitivator – Automate Metasploit Scanning And Exploitation

LinPwn – Interactive Post Exploitation Tool

LikeBox

Get Membership

Archives

CONTACT US

Tag Archive for: exploitation

LikeBox

Get Membership

Archives

CONTACT US

Log in with your credentials

Forgot your details?

Create Account