Universal Phishing Tool!

Phishbait is a working utility for creating phishing pages of 38 popular resources. There is even apple id & Yandex. In short - a must-have for creating phishing.

Installation:
▪️apt install git
▪️git clone https://github.com/Err0r-ICA/Phishbait.git
▪️cd Phishbait

Usage:
▪️bash Phishbait - launch utility‌‌

Brute force social networks

Blazy is a modern login page brute force tool that allows you to brute force and test CSRF, Clickjacking, Cloudflare and WAF Vulnerability. You can also install and use this tool in Termux for vulnerability analysis.

Installation

$ git clone https://github.com/UltimateHackers/Blazy
$ cd Blazy
$ pip install -r requirements.txt

launch

$python2blazy.py‌‌

​Infection of an Office Word document (PDF)!

Good day! As you know, some of the most dangerous viruses are those that have been hidden in documents and PDF files, as they are very difficult to detect. Today we will show you how attackers infect PDF files using the Bad-PDF utility.

Let's go!

1. Installation is carried out as follows:
git clone ht

tps://github.com/deepzec/Bad-Pdf.git
$ cd Bad-pdf/
$ chmod +x badpdf.py
2. Usage is t

hrough the following command:
python badpdf.py

The folder wit

h the utility itsel

f contains a malicious file created by Bad-PDF.

🦊FREE FOX — aggregator of discounts, promo codes, life hacks and everything FREE №1‌‌

Virus in termux for android

Well Z Virus is a collection of ready made viruses. It generates an apk virus and you have to manually send it to your victim. However, in Z Virus, all you have to do is send the link to your victim and force the victim to download the virus.

Ins

tallation:
 clone https://github.com/ZechBron/zVirus-Gen
▪️cd zVirus-Gen
chmod +x setup.sh
▪️./se

tup.sh

Launch:
▪️bash zVirus‌‌

​Finding SQL vulnerabilities

Sqlifinder is a tool that detects GET-based SQL injection vulnerabilities in web applications using backlinks, web crawlers, and SQL injection payloads.

Installation

$ git clone https://github.com/americo/sqlifinder
$ cd sqlfinder
$ pip3 install -r requirements.txt

launch

$ python3 sqlifinder.py -d example.com

💲‌‌

​Utility to deanonymize a target using a phishing link

Storm Breaker is software for creating a phishing link, which in turn produces and "steals" a photo from the victim's camera. You can also get access to the location, steal Windows 10 passwords, access the webcam and microphone.

Installation on Linux

$ git clone https://github.com/ultrasecurity/Storm-Breaker
$ cd Storm Breaker
$ sudo bash linux-installer.sh
$ python3 -m pip install -r requirements.txt

launch

$ sudo python3 Storm-Breaker.py

💲Get 1000₽ for free💲‌‌

Encrypting text into an image

ImSter is a utility that allows you to securely hide and view password-encrypted text inside an image. Text is encoded in image pixels, not metadata. It is impossible to determine by eye whether there is hidden content in the image.

Installation

Install the latest release: https://github.com/armytricks/ImSter/releases/tag/v1.1.2
$ chmod +x ImSter-*.jar

Usage

$ java -jar ImSter-xxx.jar encode -i input.png -o output.png -m "message" -p password

You can read more about using the utility on the official GitHub page of the repository.‌‌

We create viral applications and messages for Whatsapp

TigerVirus is a virus and messaging tool for WhatsApp and other applications.

Installation

$ apt update && apt upgrade
$ apt install git
$ git clone https://github.com/Devil-Tigers/TigerVirus.git
$ cd TigerVirus

launch

$ bash TigerVirus.sh

After that, we select the type of threat using numbers and then we will generate a virus file in the script directory.

Find out the IP address on Skype

Hello.
SIR is a simple tool that resolves the last known IP address of the Skype name from the network.

Installation:
▪️apt install git python
▪️git clone https://github.com/AeonDave/sir.git
▪️pip install beautifulsoup4
▪️cd sir

Usage:
▪️python sir.py - run utility
Next, enter the username and wait for the issuance of the IP.

All information is provided for informational purposes only. We are not responsible for your actions.

Wifi password list of 320 million passwords

Hello.
Fresh selection of WPA/WPA2 passwords from torrent collections, contains 320 million unique passwords.

Hashcat GPU brute force: 3090 RTX takes 5 minutes

Link:
▪️https://github.com/vladimircovic/wifi_pass

All information is provided for informational purposes only. We are not responsible for your actions.

🐬 A collection of awesome resources for the #Flipper Zero device.

https://github.com/djsime1/awesome-flipperzero

Encrypting text into an image

ImSter is a utility that allows you to securely hide and view password-encrypted text inside an image. Text is encoded in image pixels, not metadata. It is impossible to determine by eye whether there is hidden content in the image.

Installation

Install the latest release: https://github.com/armytricks/ImSter/releases/tag/v1.1.2
$ chmod +x ImSter-*.jar

Usage

$ java -jar ImSter-xxx.jar encode -i input.png -o output.png -m "message" -p password

You can read more about using the utility on the official GitHub page of the repository.‌‌

Great Android RAT in Termux!

Good day! Today we have prepared for you haxRat → TYK ←, which is a cloud-based script created in order to remotely control Android based on NodeJS. So, with it, you can block calls on the device, see all files and pictures, listen to the microphone, monitor notifications and much more.

Let's go!

1. To install, use:
apt install nodejs git
$ git clone https://github.com/hax4us/haxRat

.git
$ cd haxRat/server
$ npm install
$ mkdir ~/haxrat
2. Use is carried out by entering the following command:
$ node inde

x.js

Install 340 useful utilities with one click

Sashay is a script that allows you to automatically install 340 basic Linux tools with which you can upgrade your "skills".

Categories:
- DDOS attacks
- Brute force attacks
- Scan websites for vulnerabilities
- OSINT tools
- Sniffing
- and a couple of other useful programs.

Installation:
• git clone https://github.com/viewerdiscretion/sashay.git
• cd sashay
• chmod +x install

Launch:
• sh install

To run at any time, use the sshy command

Hidden program for catching passwords

Beelogeer is an open source electronic keylogger. It is a powerful tool and a hidden tool that can be disguised as a fake Adobe Flash update, Word document, Pdf or Pptx.

Installation:

$ apt install git python
$ git clone https://github.com/4w4k3/BeeLogger.git
$ cd BeeLogger
$ bash install.sh

Usage:
$ python bee.py

We generate a file suitable for us in numbers. Of the amenities - VirusTotal almost does not detect our file.‌‌

#OSINT

https://github.com/cipher387/osint_stuff_tool_collection

We check ourselves for hacking!

Good day! Today we will show you Loki, a scanner that allows you to detect signs of hacking. The entire operation of the scanner is based on three detection methods.

1. By file names (compliance with the regular expression of the full path of the file).
2. Verification by Yara rules (search for compliance with Yara signatures by the contents of files and process memory);
3. Checking hashes (comparing scanned files with hashes (MD5, SHA1, SHA256) of known malicious files);

Let's go!

1. To ins

tall, use:
 sudo pip2 install psutil netaddr pylzma colorama
$ git clone https://github.com/Neo23x0/Loki

$ cd Loki/
2. Use is carried out by entering the following command:
$ python2 loki-upgrader.py
$ python2 loki.py -h

Managing our own local web server

MyServer is your own locally running server. On it you can set up PHP, Apache, MySQL on Android, Linux, Ubuntu or other operating systems. With MyServer, you can set up and test your website, regardless of the technologies used in its development.

Installation

$ git clone https://github.com/rajkumardusad/MyServer.git
$ cd MyServer
$ chmod +x install

launch

$ sh install (or ./install)
$ myserver start

Syntax

$ myserver -s localhost 8080 /home/www

Brute-force Instagram accounts

Pure-L0G1C is a handy utility for carrying out a password brute-force attack on IS accounts.
The work of the program is organized through a proxy, in order to ensure anonymity.
If successful, it creates an account.txt file in the folder that contains all the data found.

Installation:

• apt update && apt upgrade - y
• apt install python python-pip git
• git clone https://github.com/Pure-L0G1C/Instagram
• cd Pure-L0G1C

Launch:

• python3 instagram.py <login> <wordlist> <mode>

<login> victim login
<wordlist> file with passwords, it can be found on the Internet
<mode> brute force mode:
-m a number, which can be 0, 1, 2, or 3. The default is zero.

Modes
0 - 64 passwords at a time
1 - 128 passwords at a time
2 - 256 passwords at a time
3 - 512 passwords at a time

​Protection against DDoS attacks!

Good day! Today we will show you one very interesting project that is designed to protect against DOS and DDoS attacks. This project is called Anti-DDOS. In fact, it uses all the necessary protection configurations, but it only works on the Linux operating system.

Let's go!

1. To install, use:
git clone https://github.com/ismailtasdelen/Anti-DDOS.git
2. Use is carried out by entering the following commands:
cd Anti-DDOS
$ bash ./anti-ddos.sh

With Anti-DDOS, you can take the necessary steps to protect your servers and applications from this type of attack.

Useful software only for the smartest kids!💾‌‌