exploitation – Cyber Sec Labs

Scour – AWS Exploitation Framework

Black Hat Sec, July 4, 2021, NEW TOOLS, Discovery, golang, AWS, Distributed, Exploitation Framework, Blue Team, Evasion, Lateral Movement, Scour, amazon, credentials, enumeration, exfiltration, exploitation, framework, information, 0

Scour is a modern module based AWS exploitation framework written in golang, designed for red team testing and blue team analysis. Scour contains modern techniques that can be used to attack environments or build detections for defense. Features ...

CamOver – A Camera Exploitation Tool That Allows To Disclosure Network Camera Admin Password

Black Hat Sec, June 23, 2021, NEW TOOLS, Shodan, Shodan API, Zoomeye, Threading, IoT Hacking, Camera Hack, Camera Hacking, CamOver, Entysec, database, exploitation, exploiting, passwords, python, cameras, 0

CamOver is a camera exploitation tool that allows to disclosure network camera admin password. Features Exploits vulnerabilities in most popular camera models such as CCTV, GoAhead and Netwave. Optimized to exploit multiple cameras at one time f...

PPLdump – Dump The Memory Of A PPL With A Userland Exploit

Black Hat Sec, June 17, 2021, NEW TOOLS, Processes, Dll Hijacking, UserLAnd, NTFS, Windows 10, Windows Exploitation, PPLdump, access, binary, bypassing, exploitation, exploiting, hijacking, kernel, payload, protection, windows, 0

This tool implements a userland exploit that was initially discussed by James Forshaw (a.k.a. @tiraniddo) - in this blog post - for dumping the memory of any PPL as an administrator. I wrote two blog posts about this tool. The first part is about Pr...

Evasor – A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies

Black Hat Sec, May 3, 2021, NEW TOOLS, Post Exploitation, DLL Injection, Red Teams, Penetration Testing Tools, Bypass Applocker Policies, Evasor, Full Automated, exploitation, injection, microsoft, vulnerable, windows, 0

The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which gen...

N1QLMap – The Tool Exfiltrates Data From Couchbase Database By Exploiting N1QL Injection Vulnerabilities

Black Hat Sec, November 26, 2020, NEW TOOLS, NodeJS, SSRF, N1QLMap, exploitation, exploiting, python, requirements, 0

N1QLMap is an N1QL exploitation tool. Currently works with Couchbase database. The tool supports data extraction and performing SSRF attacks via CURL. More information can be found here: https://labs.f-secure.com/blog/n1ql-injection-kind-of-sql-inject...

PowerZure – PowerShell Framework To Assess Azure Security

Black Hat Sec, November 2, 2020, NEW TOOLS, Command Line, PowerZure, azure, cloud, exploitation, exploits, framework, infosec, microsoft, powershell, reconnaissance, security, windows, 0

For a list of functions, their usage, and more, check out https://powerzure.readthedocs.io What is PowerZure? PowerZure is a PowerShell project created to assess and exploit resources within Microsoft’s cloud platform, Azure. PowerZure was created o...

Mikrot8Over – Fast Exploitation Tool For Mikrotik RouterOS

Black Hat Sec, October 14, 2020, NEW TOOLS, Scan, Leaks, Mikrot8Over, automation, exploitation, python, mikrotik, routeros, 0

mikrot8over: Fast exploitation tool for Mikrotik RouterOS up to 6.38.4 This is reworked original Mikrotik Exploit. Added Python 2 compatibility and multithreading scan features.Python version Utility was tested on a python2.6, python2.7, python3.*...

Ghost Framework – An Android Post Exploitation Framework That Uses An Android Debug Bridge To Remotely Access A n Android Device

Black Hat Sec, March 6, 2020, Kali Linux, NEW TOOLS, Remote Access, Exploitation Framework, Post Exploitation, Android RAT, Android Debug Bridge, Android Exploit, Android Hacking, Ghost Framework, Remote Administration, Remote Shell, android, exploitation, framework, ghost, debug, 0

Ghost Framework is an Android post exploitation framework that uses anAndroid Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.Getting startedGhost installati...

ABD – Course Materials For Advanced Binary Deobfuscation

Black Hat Sec, February 26, 2020, NEW TOOLS, Binary Exploitation, Binary Analysis, Symbolic Execution, Obfuscated Code, Deobfuscation, ABD, exploitation, obfuscation, 0

Advanced Binary DeobfuscationThis repository contains the course materials of Advanced Binary Deobfuscation at the Global Cybersecurity Camp (GCC) Tokyo in 2020.Course AbstractReverse engineering is not easy, especially if a binary code is obfuscated. ...

Corsy v1.0 – CORS Misconfiguration Scanner

Black Hat Sec, January 21, 2020, NEW TOOLS, Misconfiguration, Scans, Corsy, CORS, CORS Misconfiguration Scanner, CORS Scanner, SQL Vulnerability Scanner, exploitation, python, 0

Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations.RequirementsCorsy only works with Python 3 and has the following depencies:tldrequestsTo install these dependencies, navigate to Corsy directory and execu...

Scour – AWS Exploitation Framework

CamOver – A Camera Exploitation Tool That Allows To Disclosure Network Camera Admin Password

PPLdump – Dump The Memory Of A PPL With A Userland Exploit

Evasor – A Tool To Be Used In Post Exploitation Phase For Blue And Red Teams To Bypass APPLICATIONCONTROL Policies

N1QLMap – The Tool Exfiltrates Data From Couchbase Database By Exploiting N1QL Injection Vulnerabilities

Mikrot8Over – Fast Exploitation Tool For Mikrotik RouterOS

Ghost Framework – An Android Post Exploitation Framework That Uses An Android Debug Bridge To Remotely Access A n Android Device

ABD – Course Materials For Advanced Binary Deobfuscation

Corsy v1.0 – CORS Misconfiguration Scanner

LikeBox

Get Membership

Archives

CONTACT US

Tag Archive for: exploitation

LikeBox

Get Membership

Archives

CONTACT US

Log in with your credentials

Forgot your details?

Create Account