Collaborate Disseminate
More than 20 percent of GitHub repositories containing an attack tool or an exploit proof of concept (PoC) are written in Python. Continue reading ThreatList: Hackers Turn to Python as Attack Coding Language of Choice
An infamous brand of mobile spyware may be operating in 45 countries as part of a sprawling footprint that could enable human rights abuses, according to a new report. The Pegasus spyware made by Israeli surveillance company NSO Group correlated with more than a thousand IP addresses over a two year-study conducted by The Citizen Lab, a research and development organization at the University of Toronto. The Pegasus spyware attempts to lure targets into clinking on links and then delivers zero-day exploits to breach the defenses of iPhones and Android phones. Several of the countries where the researchers detected Pegasus have poor human rights records, such as Bahrain, Kazakhstan, and Saudi Arabia. “Our findings paint a bleak picture of the human rights risks of NSO’s global proliferation,” the report states. At least 10 operators of the spyware “appear to be actively engaged in cross-border surveillance,” according to Citizen Lab, pointing to the geopolitical […]
The post Pegasus spyware active in 45 countries, Citizen Lab says appeared first on Cyberscoop.
Continue reading Pegasus spyware active in 45 countries, Citizen Lab says
Intercepter-NG is a multi functional network toolkit including an Android app for hacking, the main purpose is to recover interesting data from the network stream and perform different kinds of MiTM attacks.
Specifically referring to Intercepter-NG Co… Continue reading Intercepter-NG – Android App For Hacking
dcipher is a JavaScript-based online hash cracking tool to decipher hashes using online rainbow & lookup table attack services.
The capacity to programmatically crack passwords is also a function of the number of possible passwords per second whic… Continue reading dcipher – Online Hash Cracking Using Rainbow & Lookup Tables
Cangibrina is a Python-based multi platform admin dashboard finder tool which aims to obtain the location of website dashboards by using brute-force, wordlists, Google, Nmap and robots.txt.
It is multi-threaded, supports modifying your user agent, usi… Continue reading Cangibrina – Admin Dashboard Finder Tool
RidRelay is a Python-based tool to enumerate usernames on a domain where you have no credentials by using a SMB Relay Attack with low privileges.
How RidRelay SMB Relay Attack Works
RidRelay combines the SMB Relay attack, common lsarpc based queries a… Continue reading RidRelay – SMB Relay Attack For Username Enumeration
NetBScanner is a NetBIOS network scanner tool that scans all computers in the IP addresses range you choose, using the NetBIOS protocol.
For every computer located by this NetBIOS scanner, the following information is displayed:
IP Address
Computer N… Continue reading NetBScanner – NetBIOS Network Scanner
Powershell-RAT is a Python-based Gmail exfiltration RAT that can be used a Windows backdoor to send screenshots or other data as an e-mail attachment.
This RAT will help you during red team engagements to backdoor any Windows machines. It tracks the u… Continue reading Powershell-RAT – Gmail Exfiltration RAT
Airgeddon is a Bash powered multi-use Wireless Security Auditing Script for Linux systems with an extremely extensive feature list.
Airgeddon Wireless Security Auditing Features
Interface mode switcher (Monitor-Managed) keeping selection even on inte… Continue reading airgeddon – Wireless Security Auditing Script
CloudFrunt is a Python-based tool for identifying misconfigured CloudFront domains, it uses DNS and looks for CNAMEs which may be allowed to be associated with CloudFront distributions. This effectively allows for domain hijacking.
How CloudFrunt Work… Continue reading CloudFrunt – Identify Misconfigured CloudFront Domains