Search results

Cangibrina is a Python-based multi platform admin dashboard finder tool which aims to obtain the location of website dashboards by using brute-force, wordlists, Google, Nmap and robots.txt. It is multi-threaded, supports modifying your user agent, using a TOR proxy, custom dorks, Nmap...

Description BLACKEYE is an upgrade from original ShellPhish Tool (https://github.com/thelinuxchoice/shellphish) by thelinuxchoice under GNU LICENSE. It is the most complete Phishing Tool, with 32 templates +1 customizable. WARNING: IT ONLY WORKS ON LAN! This tool was made for educational...

This exploit takes advantage of a use after free vulnerability in Google Chrome 72.0.3626.119 running on Windows 7 x86. The FileReader.readAsArrayBuffer function can return multiple references to the same ArrayBuffer object, which can be freed and overwritten with sprayed objects. The dangling...

A terminal user-interface for tshark, inspired by Wireshark. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Read pcap files or sniff live interfaces (where tshark is permitted). Inspect each packet using...

First we will be piping the output from a simple netcat port scan to a file named output.txt. In general command line output can be outputted to a file by using the > operator followed by a file name. For Netcat this won’t work because we need to direct both stderr and stdout into the file. We...

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows. AndroBugs Framework is an Android vulnerability analysis system that helps developers or hackers find...

Requirements 1. SAFE SOCKS5 (USA) and I insist on the word « SAFE » because a lot of noobs are making the choice to use cheap (or free) SOCKS5 and they cry once they fail. A SAFE SOCKS5 is simply a proxy provider who does’nt record your datas like IPs, personal infos etc, he’s also providing...

SocialBox is a Bruteforce Attack Framework [Facebook, Gmail, Instagram,Twitter], Coded By Belahsan Ouerghi. Installation sudo apt-get install git sudo git clone https://github.com/TunisianEagles/SocialBox.git cd SocialBox chmod +x SocialBox.sh chmod +x install-sb.sh ./install-sb.sh...

Devploit is a simple python script to Information Gathering. Download: git clone https://github.com/joker25000/Devploit How to use: cd Devploit chmod +x install ./install Run in Terminal Devploit (To run in Android you do not install file Run direct python2 Devploit) Properties: -DNS Lookup...

Vooki is a free web application vulnerability scanner. Vooki is a user-friendly tool that you can easily scan any web application and find the vulnerabilities. Vooki includes Web Application Scanner, Rest API Scanner, and reporting section. Vooki – Web Application Scanner can help you to find...

A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the Heimdal...

In this hacking tutorial we are going to upgrade a Netcat shell to a Meterpreter shell in 3 simple steps. First we will use the multi handler module in Metasploit to intercept the reverse shell using a Linux x86 payload. Then we will issue the reverse shell on a Linux host with a Bash reverse...

In this example we will be using a Netcat connection to transfer a text file. Let’s assume we have remote command execution on the target host and we want to transfer a file from the attack box to the host. First we would need to set up a listener on the target host and connect to it from the...

Let’s assume we have 2 Windows targets and 1 Kali Linux attack box. We have compromised Windows host 1 from the Kali Linux machine and we want to gain a shell on Windows host 2 which is only accessible from Windows host 1. We would need to direct the traffic from the Kali Linux host to Windows...

For all scans so far, we’ve only used the default scan configurations such as host discovery, system discovery and Full & fast. But what if we don’t want to run all NVTs on a given target (list) and only test for a few specific vulnerabilities? In this case we can create our own custom scan...

PayPal has been doing well in patching up their previous vulnerabilities and over the years it has been a cat and mouse game between PayPal and Fraudsters. Methods to exploit PayPal will be made by fraudsters and as soon as PayPal sees an increase in fraud within their organization, they will...

Sending money with WorldRemit Sending money with WorldRemit is so easy It’s hard to be thousands of miles away from the people you care about. But it needn’t be hard to send money back to them. With WorldRemit it’s easy It's simple online It’s so much simpler and more convenient to send money...

❗️First of All What is G2A.com ? G2A is digital gaming marketplace, where you can buy / sell gaming items / keys / etc ✔️Lets go to the point: 1. Prepare valid cards, find some non vbv bins cards from these country Iceland, Turkey, Japan, Peru or using some usa & canada that can make password...

things you need to make a successful carding: 1. US drop or shipping address 2. a live card with same state as drop or shipping state.. i know getting same zip code may not be possible 3.socks5 with same state as well Now let's work some magic First what you need to do is make a valid apple...

This article, I hope, will help beginners to answer myself immemorial question ?. To begin with we need to understand that here, as well as in any business, there is a chain and if simply to hammer somewhere a card, anybody home won't send the goods to you. As a rule this chain is realized by 2...