Collaborate Disseminate
OWASP ZSC is an open source obfuscated code generator tool in Python which lets you generate customized shellcodes and convert scripts to an obfuscated script.
Shellcodes are small codes in Assembly language which could be used as the payload in softw… Continue reading OWASP ZSC – Obfuscated Code Generator Tool
So here we are in 2018, taking a look back at 2017, quite a year it was. We somehow forgot to do this last year so just have the 2015 summary and the 2014 summary but no 2016 edition.
2017 News Stories
All kinds of things happened in 2017 starting wit… Continue reading A Look Back At 2017 – Tools & News Highlights
Spectre & Meltdown Checker is a simple shell script to tell if your Linux installation is vulnerable against the 3 “speculative execution” CVEs that were made public early 2018.
Without options, it’ll inspect you currently running kernel. You can … Continue reading Spectre & Meltdown Checker – Vulnerability Mitigation Tool For Linux
Hijacker is a native GUI which provides Reaver for Android along with Aircrack-ng, Airodump-ng and MDK3 making it a powerful Wifi hacker app.
It offers a simple and easy UI to use these tools without typing commands in a console and copy & pasting… Continue reading Hijacker – Reaver For Android Wifi Hacker App
Sublist3r is a Python-based tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting.
It also integrates with subbrute for subdomain bru… Continue reading Sublist3r – Fast Python Subdomain Enumeration Tool
coWPAtty is a C-based tool for running a brute-force dictionary attack against WPA-PSK and audit pre-shared WPA keys.
If you are auditing WPA-PSK networks, you can use this tool to identify weak passphrases that were used to generate the PMK. Supply … Continue reading coWPAtty Download – Audit Pre-shared WPA Keys
net-creds is a Python-based tool for sniffing plaintext passwords and hashes from a network interface or PCAP file – it doesn’t rely on port numbers for service identification and can concatenate fragmented packets.
Features of net-creds for Sniffing … Continue reading net-creds – Sniff Passwords From Interface or PCAP File
In security testing, much like most things technical there are two very contrary methods, Dynamic Application Security Testing or DAST and Static Application Security Testing or SAST.
Dynamic testing relying on a black-box external approach, attacking … Continue reading DAST vs SAST – Dynamic Application Security Testing vs Static
Cr3dOv3r is a fairly simple Python-based set of functions that carry out the prelimary work as a credential reuse attack tool.
You just give the tool your target email address then it does two fairly straightforward (but useful) jobs:
Search for pub… Continue reading Cr3dOv3r – Credential Reuse Attack Tool
Mr.SIP was developed in Python as a SIP Attack and audit tool which can emulate SIP-based attacks. Originally it was developed to be used in academic work to help developing novel SIP-based DDoS attacks and defence approaches and then as an idea to con… Continue reading Mr.SIP – SIP Attack And Audit Tool