#exploitation tools

Two campaigns targeting Selenium Grid’s default lack of authentication are underway, as threat actors are exploiting this vulnerability to deploy malicious payloads, including exploit kits, cryptominers, and proxyjackers. Selenium Grid’s widespread use among developers, coupled with its default lack of security, makes it an attractive target for attackers seeking to compromise systems and gain…

CAMO, or Commercial Applications, Malicious Operations, highlights attackers’ increasing reliance on legitimate IT tools to bypass security defenses, which can be used for various malicious activities like ransomware distribution, network scanning, lateral movement, and C2 establishment. It can mislead security personnel during investigations, leading to successful compromises. Organizations…

Hackers always keep updating their tools and add new ones to adapt to evolving security measures, bypass defenses, and exploit newly discovered vulnerabilities.  Staying ahead of the cybersecurity advancements is completely important for them as doing so helps them maintain their ability to carry out successful cyber attacks. Cybersecurity researchers at The DFIR Report recently unveiled the…

Hackers exploit open-source tools to execute attacks because they are readily available, well-documented, and often have extensive community support, making them easy to modify and deploy.  Besides this, open-source tools can be customized to evade detection, automate tasks, and leverage existing vulnerabilities, enabling threat actors to conduct sophisticated attacks efficiently. Recorded…

Reptile - LKM Linux Rootkit #rootkit #backdoor #Exploitation #Tools #Hacking #linux #infosec #Security #Reptile

Reptile is a LKM rootkit for evil purposes. If you are searching stuff only for study purposes, see the demonstration codes.

Features

Give root to unprivileged users

Hide files and directories

Hide files contents

Hide processes

Hide himself

Boot persistence

Heaven’s door – A ICMP/UDP port-knocking backdoor

Client to knock on heaven’s door 😀

Install

apt-get install linux-headers-$(uname -r)…

MIDA-Multitool - Bash Script Purposed For System Enumeration, Vulnerability Identification And Privilege Escalation #system #Enumeration

Bash script purposed for system enumeration, vulnerability identification and privilege escalation. MIDA Multitool draws functionality from several of my previous scripts namely SysEnum and RootHelperand is in many regards RootHelpers successor. Besides functionality from these two previous scripts it incorporates some of it’s own and as such aims to be a comprehensive assistant for operations…

Shadow - Unique Discrete Event Network Simulator #Networking #Simulator #Network #linux #infosec

Shadow is a unique discrete-event network simulator that runs real applications like Tor and Bitcoin, and distributed systems of thousands of nodes on a single machine. Shadow combines the accuracy of emulation with the efficiency and control of simulation, achieving the best of both approaches.

Shadow was developed because there was a recognized need for an accurate, efficient, and scalable tool…

CyberScan - Tool To Analyse Packets, Decoding , Scanning Ports, And Geolocation #Packets #Ports #Geolocation #Hacking

CyberScan is an open source penetration testing tool that can analyse packets , decoding , scanning ports, pinging and geolocation of an IP including (latitude, longitude , region , country …)

Operating Systems Supported

Windows XP/7/8/8.1/10

GNU/Linux

MacOSX

Installation You can download CyberScan by cloning the Git repository:

git clone https://github.com/medbenali/CyberScan.git cd CyberScan/…