JPGtoMalware. It embeds the executable file or payload inside the jpg file. The method the program uses isn't exactly called one of the steganography methods. For this reason, it does not cause any distortion in the JPG file. The JPG file size and payload do not have to be proportional.The JPG file is displayed normally in any viewing application or web application. It can bypass various security programs such as firewall, antivirus. If the file is examined in detail, it is easier to detect than steganography methods. However, since the payload in the JPG file is encrypted, it cannot be easily decrypted. It also uses the "garbage code insertion/dead-code insertion" method to prevent the payload from being caught by the antivirus at runtime.

spoof_mac. change mac address without using macchanger (NetworkManager9 clone bug)

sudo-snooper. Python script that acts like the original sudo binary to fool users into entering their passwords

SillyRAT. A Cross Platform multifunctional (Windows/Linux/Mac) RAT.

Cam-Hackers. Hack Cameras CCTV FREE

Bash-Oneliner. A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

postgresql-fix. Metasploit_postgresql_database_connection_fix

RedTeam-Tactics-and-Techniques. Red Teaming Tactics and Techniques

NativePayload_BSSID. Transferring Backdoor Payload by BSSID and Wireless traffic

crowbar. Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

smartbrute. Password spraying and bruteforcing tool for Active Directory Domain Services

emojify. Obfuscate your python script by converting it to emoji icons

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

Exfiltration-and-Uploading-DATA-by-DNS-Traffic-AAAA-Records-. Pdf File : Exfiltration and Uploading DATA by DNS Traffic (AAAA Records)

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

powerglot. Powerglot encodes offensive powershell scripts using polyglots . Offensive security tool useful for stego-malware, privilege escalation, lateral movement, reverse shell, etc.

Callback_Shellcode_Injection. POCs for Shellcode Injection via Callbacks

GodPotato. C#

icmpdoor. ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)

DKMC. DKMC - Dont kill my cat - Malicious payload evasion tool

SharpGhosting. Process Ghosting in C#

BITB-framwork. Hack

PSBits. Simple (relatively) things allowing you to dig a bit deeper than usual.

PowerShell-reverse-shell. Reverse TCP shell in PowerShell for fun. Made in spring 2020 with inspiration from (and a few fixes to) samratashok/nishang Invoke-PowerShellTcp.ps1 and https://cyberwardog.blogspot.com/2016/08/poweshell-encrypt-tcp-client-server.html

CmdLineSpoofer. How to spoof the command line when spawning a new process from C#.

CdpSvcLPE. Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

VBScript_Obfuscator. The VBScript Obfuscator written in VBScript

views searches