duminică, 31 decembrie 2017

Empire is a post-exploitation framework that includes a pure-PowerShell2.0 Windows agent, and a pure Python 2.6/2.7 Linux/OS X agent. It is the merge of the previous PowerShell Empire and Python EmPyre projects. The framework offers cryptologically-secure communications and a flexible architecture. On the PowerShell side, Empire implements the ability to run PowerShell agents without needing powershell.exe, rapidly deployable post-exploitation modules ranging from key loggers to Mimikatz, and adaptable communications to evade network detection, all wrapped up in a usability-focused framework.

Why PowerShell?

PowerShell offers a multitude of offensive advantages, including full .NET access, application whitelisting, direct access to the Win32 API, the ability to assemble malicious binaries in memory, and a default installation on Windows 7+. Offensive PowerShell had a watershed year in 2014, but despite the multitude of useful projects, many pentesters still struggle to integrate PowerShell into their engagements in a secure manner.

Listeners 101

The first thing you need to do when you start Empire it set up a local listener. The listeners command will jump you to the listener management menu. Any active listeners will be displayed, and this information can be redisplayed at any time with the list command. The info command will display the currently set listener options.

[Image: empire_listeners-e1509644348914.jpg]

PowerShell Empire Module Categories

Currently Empire Power Shell has the following categories for modules:

Code Execution – Ways to run more code
Collection – Post exploitation data collection
Credentials – Collect and use creds
Exfiltration – Identify egress channels
Lateral Movement – Move around the network
Management – Host management and auxilary
Persistence – Survive reboots
Privesc – Privilege escalation capabilities
Recon – Test further entry points (HTTP Basic Auth etc)
Situational Awareness – Network awareness
Trollsploit – For the lulz

Download

Trape - people tracker on the internet

decembrie 30, 2017Exploits Niciun comentariu:

Trape - People Tracker On The Internet: Learn to Track The World To Avoid Being Traced

Trape is a recognition tool that allows you to track people, the information you can get is very detailed. We want to teach the world through this, as large Internet companies could monitor you, obtaining information beyond your IP.

Some benefits

One of its most enticing functions is the remote recognition of sessions. You can know where a person has logged in, remotely. This occurs through a Bypass made to the Same Origin Policy (SOP)
Currently you can try everything from a web interface. (The console, becomes a preview of the logs and actions)
Registration of victims, requests among other data are obtained in real time.
If you get more information from a person behind a computer, you can generate a more direct and sophisticated attack. Trape was used at some point to track down criminals and know their behavior.
You can do real time phishing attacks
Simple hooking attacks
Mapping
Important details of the objective
Capturing credentials
Open Source Intelligence (OSINT)

Recognizes the sessions of the following services

Facebook
Twitter
VK
Reddit
Gmail
tumblr
Instagram
Github
Bitbucket
Dropbox
Spotify
PayPal
Amazon
Foursquare (new)
Airbnb (new)
Hackernews (new)
Slack (new)

How to use it

First unload the tool.

git clone https://github.com/boxug/trape.git
cd trape
python trape.py -h

If it does not work, try to install all the libraries that are located in the file requirements.txt

pip install -r requirements.txt

Example of execution

Example: python trape.py --url http://example.com --port 8080

In the option --url you must put the lure, can be a news page, an article something that serves as a presentation page.
In the --port option you just put the port where you want it to run
Do you like to monitor your people? Everything is possible with Trape
Do you want to perform phishing attacks? Everything is possible with Trape
In the Files directory, located on the path: /static/files here you add the files with .exe extension or download files sent to the victim.

Disclaimer

This tool has been published educational purposes in order to teach people how bad guys could track them or monitor them or obtain information from their credentials, we are not responsible for the use or the scope that may have the People through this project.

We are totally convinced that if we teach how vulnerable things are, we can make the Internet a safer place.

Download

ACUNETIX WEB VULNERABILITY SCANNER

decembrie 30, 2017Programe Niciun comentariu:

Download Acunetix Web Vulnerability Scanner

Acunetix is a web vulnerability scanner (WVS) that scans and finds out the flaws in a website that could prove fatal. This multi-threaded tool crawls a website and finds out malicious Cross-site Scripting (XSS), SQL injection, and other more than 3000 vulnerabilities. This fast and easy to use tool scans WordPress websites from more than 1200 vulnerabilities in WordPress. Download acunetix web vulnerability scanner.

Acunetix comes with a Login Sequence Recorder that allows one to access the password protected areas of websites. The new AcuSensor technology used in this tool allows you to reduce the false positive rate. Such features have made Acunetix web vulnerability scanner a preferred hacking tool that you need to secure your website.

Acunetix is available for Windows XP and higher versions of Windows.

DOWNLOAD ACUNETIX WEB VULNERABILITY SCANNER:

Click here to download.

TOP 5 MOST POPULAR HACKING TOOLS OF 2017

decembrie 30, 2017Programe Niciun comentariu:

Hacking took birth as technology did. Hacking can be used both for malicious purposes as well as a means for finding flaws in a system and notify the authorities to help them fortify their defence system better. They just play a role of an ethical hacker. However, the tools and scripts used for hacking are known to all hackers for their own purposes. They help them greatly in their task by performing specific functions to gain leverage over a user’s system in case of non-ethical hackers and against malicious users in case of ethical hackers. Here are few of the top most popular hacking tools of 2017.

TOP 5 MOST POPULAR HACKING TOOLS OF 2017

I have streamlined few of the top 5 most popular hacking tools of 2017.

1. METASPLOIT

Metasploit is a cryptographic tool that is hugely popular when it comes to hackers, whether they are black hat or white hat. It helps hackers gain knowledge about known security vulnerabilities. Its evasion tools are one of the many applications of Metaspoilt. It’s a complete suite of different types of hacking attacks.

2. JOHN THE RIPPER

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version.

John the Ripper is free and Open Source software, distributed primarily in source code form. If you would rather use a commercial product tailored for your specific operating system.

Download John the Ripper.

3. BURP SUITE

Burp suite which is used to map out and list the different parameters and pages of a website merely by examining the cookies and initiating connections with applications residing in the website, is arguably the most important component of Burp Suite. Vulnerabilities in the web applications can be easily identified using Burp Suite, and many hackers employ this method to find a suitable point of attack.

4. CAIN & ABEL

Cain & Abel is a password recovery and hacking tool, primarily used for Microsoft systems. It helps with password recovery by cracking encrypted passwords using a few brute force methods like the dictionary method. Cain & Abel can also record VoIP conversations and recover wireless network keys.

5. ETTERCAP

Ettercap is a free and open source network security tool for man-in-the-middle attacks on LAN. It can be used for computer network protocol analysis and security auditing. It runs on various Unix-like operating systems including Linux, Mac OS X, BSD and Solaris, and on Microsoft Windows. It is capable of intercepting traffic on a network segment, capturing passwords, and conducting active eavesdropping against a number of common protocols.

These are the top 5 most popular hacking tools of 2017. There are many other tools but this time these are the top of them.

DOWNLOAD SQLI HUNTER V1.2 – SQL INJECTION TOOL

decembrie 30, 2017Programe Niciun comentariu:

Download SQLi Hunter v1.2 – SQL Injection Tool

SQLi hunter is a tool to scan for an SQLi Injection vulnerability in a website on auto-pilot. It automates the search of SQLi vulnerable links from Google using different dorks. SQLi hunter can also find admin panel page of any website by using some predefined admin page lists. Download SQLi hunter v1.2.

FEATURES

– Supports 500 results
– Url List can be Imported / Exported
– Setting for connection timeout
– Proxy Settings

If you’re not totally satisfied with this tool, you can try other sql injection tools like havij , sqli dumper and sqlmap. These tools are incredibly super flexible with their advanced injection features.

DOWNLOAD SQLI HUNTER V1.2

Click here to download.

duminică, 31 decembrie 2017

sâmbătă, 30 decembrie 2017

Trape - People Tracker On The Internet: Learn to Track The World To Avoid Being Traced

Some benefits

Recognizes the sessions of the following services

How to use it

Example of execution

DOWNLOAD ACUNETIX WEB VULNERABILITY SCANNER:

TOP 5 MOST POPULAR HACKING TOOLS OF 2017

1. METASPLOIT

2. JOHN THE RIPPER

3. BURP SUITE

4. CAIN & ABEL

5. ETTERCAP

FEATURES

DOWNLOAD SQLI HUNTER V1.2

Donate

Your donations are used to improve resources !!!

Important !!!

Categorii

Parteneri

Labels

Blog Archive