Collaborate Disseminate
Memcrashed is a Memcached DDoS exploit tool written in Python that allows you to send forged UDP packets to a list of Memcached servers obtained from Shodan.
This is related to the recent record-breaking Memcached DDoS attacks that are likely to plagu… Continue reading Memcrashed – Memcached DDoS Exploit Tool
XSStrike is an advanced XSS detection suite, which contains a powerful XSS fuzzer and provides zero false positive results using fuzzy matching. XSStrike is the first XSS scanner to generate its own payloads.
It is also built in an intelligent enough … Continue reading XSStrike – Advanced XSS Fuzzer & Exploitation Suite
Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. It also allows you to easily perform clickjacking, or steal “clicks” from users on many websites, forcing the user to unknowingly… Continue reading Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool
Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. It also allows you to easily perform clickjacking, or steal “clicks” from users on many websites, forcing the user to unknowingly… Continue reading Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool
BootStomp is a Python-based tool, with Docker support that helps you find two different classes of Android bootloader vulnerabilities and bugs. It looks for memory corruption and state storage vulnerabilities.
Note that BootStomp works with boot-load… Continue reading BootStomp – Find Android Bootloader Vulnerabilities
Altdns is a Subdomain Recon Tool in Python that allows for the discovery of subdomains that conform to patterns. The tool takes in words that could be present in subdomains under a domain (such as test, dev, staging) as well as takes in a list of subdo… Continue reading altdns – Subdomain Recon Tool With Permutation Generation
dorkbot is a modular command-line tool for Google dorking, which is performing vulnerability scans against a set of web pages returned by Google search queries in a given Google Custom Search Engine.
How dorkbot works
It is broken up into two sets of … Continue reading dorkbot – Command-Line Tool For Google Dorking
USBPcap is an open-source USB Packet Capture tool for Windows that can be used together with Wireshark in order to analyse USB traffic without using a Virtual Machine.
Currently, the live capture can be done on “standard input” capture basis: you writ… Continue reading USBPcap – USB Packet Capture For Windows
OWASP ZSC is an open source obfuscated code generator tool in Python which lets you generate customized shellcodes and convert scripts to an obfuscated script.
Shellcodes are small codes in Assembly language which could be used as the payload in softw… Continue reading OWASP ZSC – Obfuscated Code Generator Tool
Security researchers have uncovered a previously undetected group of Russian-speaking hackers that has silently been targeting Banks, financial institutions, and legal firms, primarily in the United States, UK, and Russia.
Moscow-based security firm G… Continue reading Newly Uncovered ‘MoneyTaker’ Hacker Group Stole Millions from U.S. & Russian Banks