اداة تغيير الايبي الى 500 خادم في الثانية
sudo apt-get install tor
sudo apt-get install privoxy
2: git clone https://github.com/FDX100/Auto_Tor_IP_changer.git
3 : cd Auto_Tor_IP_changer
4 : python autoTOR.py
5 : عدد ثواني تغيير ال ip
6 : ثم قم بتعديل الخادم الوكيل في الكمبيوتر ووضع 127.0.0.1:9050
ملاحظة : تعمل الاداة على انظمة لينكس فقط
sudo apt-get install tor
sudo apt-get install privoxy
2: git clone https://github.com/FDX100/Auto_Tor_IP_changer.git
3 : cd Auto_Tor_IP_changer
4 : python autoTOR.py
5 : عدد ثواني تغيير ال ip
6 : ثم قم بتعديل الخادم الوكيل في الكمبيوتر ووضع 127.0.0.1:9050
ملاحظة : تعمل الاداة على انظمة لينكس فقط
GitHub
GitHub - FDX100/Auto_Tor_IP_changer: change your Ip address automatically This tool based on tor project
change your Ip address automatically This tool based on tor project - FDX100/Auto_Tor_IP_changer
كورسات
❤
Udemy - After Effects Create an Intro Video
👉https://mega.nz/#F!mWxVEDxa!OxHw0aOPBKtNB8vBBYiovA
Udemy - Amazon Dropship Mastery
👉https://mega.nz/#F!fPByySRa!CW1z9KOMCWpZHfaluOFeYg
Udemy - Android Development for Newbies
👉https://mega.nz/#F!yeQUnaCS!yIcb_Rni8doR3y-wpir3VQ
Udemy - Angular Material - Quickstart
👉https://mega.nz/#F!zeBgRYbA!uAzLqtUghlDWCmHpi4h4Mw
Udemy - Animate Hipster Logos & Badges in After Effects
👉https://mega.nz/#F!eaRgQQgD!mhtnheNRousdF6e1_HP3Fw
Udemy - AutoDesk Maya 3D Animations & Visual Effects for Beginners
👉https://mega.nz/#F!WTYEmaJJ!pb_0M9fMvy1eqTHS8DI-5Q
Udemy - Bootstrap For Rapid Web Development
👉https://mega.nz/#F!XfJknQxA!Iw99-Rp95EdmTcVkrpOQtA
Udemy - Bug Bounty Android Hacking
👉https://mega.nz/#F!TfQgUKZI!qoZjSC1K8FDHFoH31BIHyw
Udemy - Build an Advanced Keylogger using C++ for Ethical Hacking
👉https://mega.nz/#F!rTYUkIia!YHXeTLMu1-dqN9Uf45KzOg
Udemy - Css & JQuery Form Designing From Beginner to Expert
👉https://mega.nz/#F!rSByTKYJ!ryGAfR63gij1PITLxGu0lg
Udemy - Facebook Marketing Next Level List Building Strategies
👉https://mega.nz/#F!fGYQRYLT!1CCzvwijWCVAF-91XKqPUg
Udemy - Get 100,000+ Premium Royalty Free Images For your Website
👉https://mega.nz/#F!CeJW3KDY!CawtyYUsDzAWeP8IKfFKYQ
Udemy - How Hackers Create Malware and Infiltrate Victim Machines
👉https://mega.nz/#F!jWYy2C7D!vfovMwvdcdxEWoNOtYSwWg
Udemy - How To Start Dropshipping With Shopify & Aliexpress
👉https://mega.nz/#F!jXRgWQ4b!DbzijHPxygxKBLKo-2eYpg
Udemy - How To Start Trading Penny Stocks In 10 Easy Steps 2017
👉https://mega.nz/#F!bPYAXQaD!hjfmlEepFFblcGKk1Xdqcg
Udemy - How to Succeed on Fiverr by Doing Freelance Work
👉https://mega.nz/#F!naBwkKxa!qp-NsJTlaelL0XjYFs8FUg
Udemy - Kotlin for Android Development Develop an App with Kotlin
👉https://mega.nz/#F!rTBy3S5Q!FsSSDMudiY-xc7zKdRsScA
Udemy - Learn Android 4.0 Programming in Java
👉https://mega.nz/#F!TXJCHIiQ!xkjgR2nnAR7y7SU4mZuRcA
Udemy - Learn Python 3 From Beginner To Advanced
👉https://mega.nz/#F!GDYCgaAJ!ifBc9bGoQRUUYENE1nWPaA
Udemy - Linux Command Line Basics
👉https://mega.nz/#F!fKAUAapB!9jtFYQVTmC9OE8STwR9knw
Udemy - Make Money Become a Shopify Expert (from zero to hero)
👉https://mega.nz/#F!GeRGXYZB!hriDUDYLlPSFv6-nTn379Q
Udemy - NEW for 2017! Growth Hacking with Digital Marketing (v 4.1)
👉https://mega.nz/#F!afBwQQrK!QwZyNFLlSy9eUQ4EQaS61w
Udemy - Photoshop for Entrepreneurs - Design 11 Practical Projects
👉https://mega.nz/#F!ieQE3KiT!eggcf06W72NRyos8YG8Iow
Udemy - Photoshop for Web Design Beginners
👉https://mega.nz/#F!6PJUiSxT!WC_y3VvxI3Xd33Mr7z_RIg
Udemy - Photoshop Tips and Tricks
👉https://mega.nz/#F!eXIyQSgY!1X2pFd4axiahoMkKiLAPNw
Udemy - Pinterest Marketing A-Z Beginner's Pinterest Blueprint
👉https://mega.nz/#F!GLIyGK5B!vtd4FPfWcWYNaO_IGLACWQ
Udemy - Rapid Website Design with Bootstrap
👉https://mega.nz/#F!PfYGTaQT!eBFfJYGURtlbwcgeFmQtTQ
Udemy - Sell Website In Flippa + FREE Software
👉https://mega.nz/#F!3eIkFa5C!sFzBGy46_IYzhmHqGODfEg
Udemy - SEO Basics Tips for Ranking Better
👉https://mega.nz/#F!XeREXCJT!sGLfGuxcMdGV6bNhsTuPWw
Udemy - Shopify Drop Ship Mastery
👉https://mega.nz/#F!PLQWUagK!kDSA_aU9KVprJdtqxOwquA
Udemy - Shopify Tyrant How To Start An Ecommerce Biz From Scratch
👉https://mega.nz/#F!jKIW2IZR!BSVe9yttxPnxPogCkUsuyw
Udemy - The art Of Real Ios Programming
👉https://mega.nz/#F!qWBgTYKB!LCm-OPKVm3o6Y5ytXl1ZLQ
Udemy - The Complete Ethical Hacking Course Beginner to Advanced
👉https://mega.nz/#F!GW5lETrJ!BZQku-SK2rtUQLTJh42LIw
Udemy - The Complete Ethical Hacking Course for 2016-2017
👉https://mega.nz/#F!zTpXGRga!6DPqvrUIMFgaYstMOD2HVg
Udemy - The Platform's Biggest & Most Popular Photoshop Course
https://mega.nz/#F!bLxzzLSI!EbzbWp_OiV8AFTgb1Gvwxg
Udemy - Unity 3D Course No Coding, Build & Market Video Games Fast Unity 3D Course No Coding, Build & Market Video Games
👉https://mega.nz/#F!qeoXTTTR!DHGHmTiKa274HaPN9X2pMA
❤
Udemy - After Effects Create an Intro Video
👉https://mega.nz/#F!mWxVEDxa!OxHw0aOPBKtNB8vBBYiovA
Udemy - Amazon Dropship Mastery
👉https://mega.nz/#F!fPByySRa!CW1z9KOMCWpZHfaluOFeYg
Udemy - Android Development for Newbies
👉https://mega.nz/#F!yeQUnaCS!yIcb_Rni8doR3y-wpir3VQ
Udemy - Angular Material - Quickstart
👉https://mega.nz/#F!zeBgRYbA!uAzLqtUghlDWCmHpi4h4Mw
Udemy - Animate Hipster Logos & Badges in After Effects
👉https://mega.nz/#F!eaRgQQgD!mhtnheNRousdF6e1_HP3Fw
Udemy - AutoDesk Maya 3D Animations & Visual Effects for Beginners
👉https://mega.nz/#F!WTYEmaJJ!pb_0M9fMvy1eqTHS8DI-5Q
Udemy - Bootstrap For Rapid Web Development
👉https://mega.nz/#F!XfJknQxA!Iw99-Rp95EdmTcVkrpOQtA
Udemy - Bug Bounty Android Hacking
👉https://mega.nz/#F!TfQgUKZI!qoZjSC1K8FDHFoH31BIHyw
Udemy - Build an Advanced Keylogger using C++ for Ethical Hacking
👉https://mega.nz/#F!rTYUkIia!YHXeTLMu1-dqN9Uf45KzOg
Udemy - Css & JQuery Form Designing From Beginner to Expert
👉https://mega.nz/#F!rSByTKYJ!ryGAfR63gij1PITLxGu0lg
Udemy - Facebook Marketing Next Level List Building Strategies
👉https://mega.nz/#F!fGYQRYLT!1CCzvwijWCVAF-91XKqPUg
Udemy - Get 100,000+ Premium Royalty Free Images For your Website
👉https://mega.nz/#F!CeJW3KDY!CawtyYUsDzAWeP8IKfFKYQ
Udemy - How Hackers Create Malware and Infiltrate Victim Machines
👉https://mega.nz/#F!jWYy2C7D!vfovMwvdcdxEWoNOtYSwWg
Udemy - How To Start Dropshipping With Shopify & Aliexpress
👉https://mega.nz/#F!jXRgWQ4b!DbzijHPxygxKBLKo-2eYpg
Udemy - How To Start Trading Penny Stocks In 10 Easy Steps 2017
👉https://mega.nz/#F!bPYAXQaD!hjfmlEepFFblcGKk1Xdqcg
Udemy - How to Succeed on Fiverr by Doing Freelance Work
👉https://mega.nz/#F!naBwkKxa!qp-NsJTlaelL0XjYFs8FUg
Udemy - Kotlin for Android Development Develop an App with Kotlin
👉https://mega.nz/#F!rTBy3S5Q!FsSSDMudiY-xc7zKdRsScA
Udemy - Learn Android 4.0 Programming in Java
👉https://mega.nz/#F!TXJCHIiQ!xkjgR2nnAR7y7SU4mZuRcA
Udemy - Learn Python 3 From Beginner To Advanced
👉https://mega.nz/#F!GDYCgaAJ!ifBc9bGoQRUUYENE1nWPaA
Udemy - Linux Command Line Basics
👉https://mega.nz/#F!fKAUAapB!9jtFYQVTmC9OE8STwR9knw
Udemy - Make Money Become a Shopify Expert (from zero to hero)
👉https://mega.nz/#F!GeRGXYZB!hriDUDYLlPSFv6-nTn379Q
Udemy - NEW for 2017! Growth Hacking with Digital Marketing (v 4.1)
👉https://mega.nz/#F!afBwQQrK!QwZyNFLlSy9eUQ4EQaS61w
Udemy - Photoshop for Entrepreneurs - Design 11 Practical Projects
👉https://mega.nz/#F!ieQE3KiT!eggcf06W72NRyos8YG8Iow
Udemy - Photoshop for Web Design Beginners
👉https://mega.nz/#F!6PJUiSxT!WC_y3VvxI3Xd33Mr7z_RIg
Udemy - Photoshop Tips and Tricks
👉https://mega.nz/#F!eXIyQSgY!1X2pFd4axiahoMkKiLAPNw
Udemy - Pinterest Marketing A-Z Beginner's Pinterest Blueprint
👉https://mega.nz/#F!GLIyGK5B!vtd4FPfWcWYNaO_IGLACWQ
Udemy - Rapid Website Design with Bootstrap
👉https://mega.nz/#F!PfYGTaQT!eBFfJYGURtlbwcgeFmQtTQ
Udemy - Sell Website In Flippa + FREE Software
👉https://mega.nz/#F!3eIkFa5C!sFzBGy46_IYzhmHqGODfEg
Udemy - SEO Basics Tips for Ranking Better
👉https://mega.nz/#F!XeREXCJT!sGLfGuxcMdGV6bNhsTuPWw
Udemy - Shopify Drop Ship Mastery
👉https://mega.nz/#F!PLQWUagK!kDSA_aU9KVprJdtqxOwquA
Udemy - Shopify Tyrant How To Start An Ecommerce Biz From Scratch
👉https://mega.nz/#F!jKIW2IZR!BSVe9yttxPnxPogCkUsuyw
Udemy - The art Of Real Ios Programming
👉https://mega.nz/#F!qWBgTYKB!LCm-OPKVm3o6Y5ytXl1ZLQ
Udemy - The Complete Ethical Hacking Course Beginner to Advanced
👉https://mega.nz/#F!GW5lETrJ!BZQku-SK2rtUQLTJh42LIw
Udemy - The Complete Ethical Hacking Course for 2016-2017
👉https://mega.nz/#F!zTpXGRga!6DPqvrUIMFgaYstMOD2HVg
Udemy - The Platform's Biggest & Most Popular Photoshop Course
https://mega.nz/#F!bLxzzLSI!EbzbWp_OiV8AFTgb1Gvwxg
Udemy - Unity 3D Course No Coding, Build & Market Video Games Fast Unity 3D Course No Coding, Build & Market Video Games
👉https://mega.nz/#F!qeoXTTTR!DHGHmTiKa274HaPN9X2pMA
Saker:-- #Flexible #Penetrate #Testing #Auxiliary #Suite.
brief support features:-
1. scan website
#information #gathering
#framework #fingerprint
2. #fuzz #web request
#XSS
#SQL #injection
SSRF
XXE
3. #subdomain gathering
4. #port scanner
5. bruteforce
web dir
zip password
domain
6. auxiliary servers
#DNS rebinding
SSRF
XSS
7. third party API integration
crtsh
DNS dumper
#github
#sqlmap
#Download #Link:-
https://github.com/LyleMi/Saker
Saker:-- #Flexible #Penetrate #Testing #Auxiliary #Suite.
brief support features:-
1. scan website
#information #gathering
#framework #fingerprint
2. #fuzz #web request
#XSS
#SQL #injection
SSRF
XXE
3. #subdomain gathering
4. #port scanner
5. bruteforce
web dir
zip password
domain
6. auxiliary servers
#DNS rebinding
SSRF
XSS
7. third party API integration
crtsh
DNS dumper
#github
#sqlmap
#Download #Link:-
https://github.com/LyleMi/Saker
brief support features:-
1. scan website
#information #gathering
#framework #fingerprint
2. #fuzz #web request
#XSS
#SQL #injection
SSRF
XXE
3. #subdomain gathering
4. #port scanner
5. bruteforce
web dir
zip password
domain
6. auxiliary servers
#DNS rebinding
SSRF
XSS
7. third party API integration
crtsh
DNS dumper
#github
#sqlmap
#Download #Link:-
https://github.com/LyleMi/Saker
Saker:-- #Flexible #Penetrate #Testing #Auxiliary #Suite.
brief support features:-
1. scan website
#information #gathering
#framework #fingerprint
2. #fuzz #web request
#XSS
#SQL #injection
SSRF
XXE
3. #subdomain gathering
4. #port scanner
5. bruteforce
web dir
zip password
domain
6. auxiliary servers
#DNS rebinding
SSRF
XSS
7. third party API integration
crtsh
DNS dumper
#github
#sqlmap
#Download #Link:-
https://github.com/LyleMi/Saker
GitHub
GitHub - LyleMi/Saker: Flexible Penetrate Testing Auxiliary Suite
Flexible Penetrate Testing Auxiliary Suite. Contribute to LyleMi/Saker development by creating an account on GitHub.
#Google Confirms #Critical #Android 8, 9 And 10 ‘Permanent’ Denial Of Service Threat:--
#CVE-2019-2232 has been rated as the most severe of three critical #vulnerabilities addressed in the #December Android #Security #Bulletin. The official #NIST National Vulnerability #Database description of the vulnerability says that improper input validation in the "handleRun of TextLine.java" could create a "possible application crash." In other words, a maliciously-crafted message could cause a denial of service to your Android device. A permanent denial of service attack that could effectively kibosh your #smartphone. "User interaction is not needed for exploitation," the description continues, and the remote denial of service attack needs "no additional execution #privileges," for good measure.
The vulnerability applies to Android 8.0, Android 8.1, Android 9 and Android 10 versions.
#Link:-
https://www.forbes.com/sites/daveywinder/2019/12/07/google-confirms-critical-android-8-9-and-10-permanent-denial-of-service-threat/
#Google Confirms #Critical #Android 8, 9 And 10 ‘Permanent’ Denial Of Service Threat:--
#CVE-2019-2232 has been rated as the most severe of three critical #vulnerabilities addressed in the #December Android #Security #Bulletin. The official #NIST National Vulnerability #Database description of the vulnerability says that improper input validation in the "handleRun of TextLine.java" could create a "possible application crash." In other words, a maliciously-crafted message could cause a denial of service to your Android device. A permanent denial of service attack that could effectively kibosh your #smartphone. "User interaction is not needed for exploitation," the description continues, and the remote denial of service attack needs "no additional execution #privileges," for good measure.
The vulnerability applies to Android 8.0, Android 8.1, Android 9 and Android 10 versions.
#Link:-
https://www.forbes.com/sites/daveywinder/2019/12/07/google-confirms-critical-android-8-9-and-10-permanent-denial-of-service-threat/
#CVE-2019-2232 has been rated as the most severe of three critical #vulnerabilities addressed in the #December Android #Security #Bulletin. The official #NIST National Vulnerability #Database description of the vulnerability says that improper input validation in the "handleRun of TextLine.java" could create a "possible application crash." In other words, a maliciously-crafted message could cause a denial of service to your Android device. A permanent denial of service attack that could effectively kibosh your #smartphone. "User interaction is not needed for exploitation," the description continues, and the remote denial of service attack needs "no additional execution #privileges," for good measure.
The vulnerability applies to Android 8.0, Android 8.1, Android 9 and Android 10 versions.
#Link:-
https://www.forbes.com/sites/daveywinder/2019/12/07/google-confirms-critical-android-8-9-and-10-permanent-denial-of-service-threat/
#Google Confirms #Critical #Android 8, 9 And 10 ‘Permanent’ Denial Of Service Threat:--
#CVE-2019-2232 has been rated as the most severe of three critical #vulnerabilities addressed in the #December Android #Security #Bulletin. The official #NIST National Vulnerability #Database description of the vulnerability says that improper input validation in the "handleRun of TextLine.java" could create a "possible application crash." In other words, a maliciously-crafted message could cause a denial of service to your Android device. A permanent denial of service attack that could effectively kibosh your #smartphone. "User interaction is not needed for exploitation," the description continues, and the remote denial of service attack needs "no additional execution #privileges," for good measure.
The vulnerability applies to Android 8.0, Android 8.1, Android 9 and Android 10 versions.
#Link:-
https://www.forbes.com/sites/daveywinder/2019/12/07/google-confirms-critical-android-8-9-and-10-permanent-denial-of-service-threat/
Forbes
Google Confirms Critical Android 8, 9 And 10 ‘Permanent’ Denial Of Service Threat
Google has confirmed a critical security threat for millions of Android 8, 9 and 10 users that could permanently kibosh your smartphone with a single malicious message
Photos from National Cyber Security Services's post
Searpy:-- #Search #Engine #Toolkit.
Batch search tool for #acquisition during #infiltration.
search engine:-
1. #Shodan
2. #Fofa
3. #Zoomeye
4. #Google
5. #Baidu
6. #Bing
7. 360so
8. goo
#Usage:-
python Searpy.py --fofa -s "app:jboss" -p 1
python Searpy.py --shodan -s "weblogic" -l 10
python Searpy.py --google -s "inurl:login.action" -p 1
#Download #Link:-
https://github.com/j3ers3/Searpy
Searpy:-- #Search #Engine #Toolkit.
Batch search tool for #acquisition during #infiltration.
search engine:-
1. #Shodan
2. #Fofa
3. #Zoomeye
4. #Google
5. #Baidu
6. #Bing
7. 360so
8. goo
#Usage:-
python Searpy.py --fofa -s "app:jboss" -p 1
python Searpy.py --shodan -s "weblogic" -l 10
python Searpy.py --google -s "inurl:login.action" -p 1
#Download #Link:-
https://github.com/j3ers3/Searpy
GitHub
GitHub - j3ers3/Searpy: 🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找
🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找 - j3ers3/Searpy
Flynet:-- A #powerful #TCP/ #UDP tool, which support #socks5 proxy by tcp and udp, #http #proxy and #NAT traversal. This tool can help you #bypass #gfw easily.
#flynet Is a command-line tool written in #Golang language, currently supported features include:
1. Http proxy
2. Local Socks5 proxy
3. C/S mode of Socks5 proxy by TCP
4. C/S mode of Socks5 proxy by UDP
5. NAT traversal
#Download #Link:-
https://github.com/asche910/flynet
Flynet:-- A #powerful #TCP/ #UDP tool, which support #socks5 proxy by tcp and udp, #http #proxy and #NAT traversal. This tool can help you #bypass #gfw easily.
#flynet Is a command-line tool written in #Golang language, currently supported features include:
1. Http proxy
2. Local Socks5 proxy
3. C/S mode of Socks5 proxy by TCP
4. C/S mode of Socks5 proxy by UDP
5. NAT traversal
#Download #Link:-
https://github.com/asche910/flynet
#flynet Is a command-line tool written in #Golang language, currently supported features include:
1. Http proxy
2. Local Socks5 proxy
3. C/S mode of Socks5 proxy by TCP
4. C/S mode of Socks5 proxy by UDP
5. NAT traversal
#Download #Link:-
https://github.com/asche910/flynet
Flynet:-- A #powerful #TCP/ #UDP tool, which support #socks5 proxy by tcp and udp, #http #proxy and #NAT traversal. This tool can help you #bypass #gfw easily.
#flynet Is a command-line tool written in #Golang language, currently supported features include:
1. Http proxy
2. Local Socks5 proxy
3. C/S mode of Socks5 proxy by TCP
4. C/S mode of Socks5 proxy by UDP
5. NAT traversal
#Download #Link:-
https://github.com/asche910/flynet
GitHub
GitHub - asche910/flynet: A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal.
A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal. - GitHub - asche910/flynet: A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, ht...
Photos from National Cyber Security Services's post
Android-Security-Evaluation-Environment:-- An #emulated, disposable, efficient #Android #pentesting and #security evaluation #environment.
Creating a #penetration #testing environment using Android Studio: Android #Virtual #Devices (#AVD)
#Downlaod #Link:-
https://github.com/TheSeanis/Android-Security-Evaluation-Environment
Android-Security-Evaluation-Environment:-- An #emulated, disposable, efficient #Android #pentesting and #security evaluation #environment.
Creating a #penetration #testing environment using Android Studio: Android #Virtual #Devices (#AVD)
#Downlaod #Link:-
https://github.com/TheSeanis/Android-Security-Evaluation-Environment
GitHub
TheSeanis/Android-Security-Evaluation-Environment
An emulated, disposable, efficient Android pentesting and security evaluation environment. - TheSeanis/Android-Security-Evaluation-Environment
#ImgBackdoor:-- #Hide your #payload into .jpg file.
This #module takes one existing image.jpg and one payload.ps1 (input by the user) and
builds a new payload (agent.jpg.exe) that if executed it will trigger the download of
the 2 previous files stored into apache2 (image.jpg + payload.ps1) and execute them.
This module also changes the agent.exe Icon to match one file.jpg Then uses the spoof
'Hide #extensions for known file types' method to hide the agent.exe extension.
All payloads (user input) will be downloaded from our #apache2 #webserver
and #executed into target #RAM. The only extension (payload input by the user)
that requires to write the payload to disk are .exe binaries.
#Download #Link:-
https://github.com/kennedy69/ImgBackdoor
#ImgBackdoor:-- #Hide your #payload into .jpg file.
This #module takes one existing image.jpg and one payload.ps1 (input by the user) and
builds a new payload (agent.jpg.exe) that if executed it will trigger the download of
the 2 previous files stored into apache2 (image.jpg + payload.ps1) and execute them.
This module also changes the agent.exe Icon to match one file.jpg Then uses the spoof
'Hide #extensions for known file types' method to hide the agent.exe extension.
All payloads (user input) will be downloaded from our #apache2 #webserver
and #executed into target #RAM. The only extension (payload input by the user)
that requires to write the payload to disk are .exe binaries.
#Download #Link:-
https://github.com/kennedy69/ImgBackdoor
This #module takes one existing image.jpg and one payload.ps1 (input by the user) and
builds a new payload (agent.jpg.exe) that if executed it will trigger the download of
the 2 previous files stored into apache2 (image.jpg + payload.ps1) and execute them.
This module also changes the agent.exe Icon to match one file.jpg Then uses the spoof
'Hide #extensions for known file types' method to hide the agent.exe extension.
All payloads (user input) will be downloaded from our #apache2 #webserver
and #executed into target #RAM. The only extension (payload input by the user)
that requires to write the payload to disk are .exe binaries.
#Download #Link:-
https://github.com/kennedy69/ImgBackdoor
#ImgBackdoor:-- #Hide your #payload into .jpg file.
This #module takes one existing image.jpg and one payload.ps1 (input by the user) and
builds a new payload (agent.jpg.exe) that if executed it will trigger the download of
the 2 previous files stored into apache2 (image.jpg + payload.ps1) and execute them.
This module also changes the agent.exe Icon to match one file.jpg Then uses the spoof
'Hide #extensions for known file types' method to hide the agent.exe extension.
All payloads (user input) will be downloaded from our #apache2 #webserver
and #executed into target #RAM. The only extension (payload input by the user)
that requires to write the payload to disk are .exe binaries.
#Download #Link:-
https://github.com/kennedy69/ImgBackdoor
GitHub
GitHub - Tsuyoken/ImgBackdoor: Hide your payload into .jpg file
Hide your payload into .jpg file. Contribute to Tsuyoken/ImgBackdoor development by creating an account on GitHub.
Photos from National Cyber Security Services's post
CVE-2019-18935:-- #RCE #exploit for a .NET #deserialization #vulnerability in #Telerik UI for ASP.NET AJAX.
This exploit leverages #encryption logic from RAU_crypto. The RAUCipher class within RAU_crypto.py depends on PyCryptodome, a drop-in replacement for the dead PyCrypto module. #PyCryptodome and #PyCrypto create problems when installed in the same environment, so the best way to satisfy this dependency is to install the module within a virtual environment, as shown above.
#Download #Link:-
https://github.com/noperator/CVE-2019-18935
CVE-2019-18935:-- #RCE #exploit for a .NET #deserialization #vulnerability in #Telerik UI for ASP.NET AJAX.
This exploit leverages #encryption logic from RAU_crypto. The RAUCipher class within RAU_crypto.py depends on PyCryptodome, a drop-in replacement for the dead PyCrypto module. #PyCryptodome and #PyCrypto create problems when installed in the same environment, so the best way to satisfy this dependency is to install the module within a virtual environment, as shown above.
#Download #Link:-
https://github.com/noperator/CVE-2019-18935
GitHub
GitHub - noperator/CVE-2019-18935: RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.
RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX. - noperator/CVE-2019-18935
Assembly:-- A #modern front-end #development #framework for UI-friendly rapid #prototyping.
#Download #Link:-
https://github.com/Kuipr/Assembly
Assembly:-- A #modern front-end #development #framework for UI-friendly rapid #prototyping.
#Download #Link:-
https://github.com/Kuipr/Assembly
#Download #Link:-
https://github.com/Kuipr/Assembly
Assembly:-- A #modern front-end #development #framework for UI-friendly rapid #prototyping.
#Download #Link:-
https://github.com/Kuipr/Assembly
GitHub
Kuipr/Assembly
A modern front-end development framework for UI-friendly rapid prototyping. - Kuipr/Assembly
wallet-core:-- Cross-platform, cross-blockchain #wallet library.
Trust Wallet Core is a cross-platform library that implements low-level #cryptographic wallet functionality for all supported #blockchains. Most of the code is C++ with a set of strict exported C interfaces. The library provides idiomatic interfaces for all supported #languages (currently #Swift for #iOS and #Java for #Android).
#Download #Link:-
https://github.com/trustwallet/wallet-core
wallet-core:-- Cross-platform, cross-blockchain #wallet library.
Trust Wallet Core is a cross-platform library that implements low-level #cryptographic wallet functionality for all supported #blockchains. Most of the code is C++ with a set of strict exported C interfaces. The library provides idiomatic interfaces for all supported #languages (currently #Swift for #iOS and #Java for #Android).
#Download #Link:-
https://github.com/trustwallet/wallet-core
Trust Wallet Core is a cross-platform library that implements low-level #cryptographic wallet functionality for all supported #blockchains. Most of the code is C++ with a set of strict exported C interfaces. The library provides idiomatic interfaces for all supported #languages (currently #Swift for #iOS and #Java for #Android).
#Download #Link:-
https://github.com/trustwallet/wallet-core
wallet-core:-- Cross-platform, cross-blockchain #wallet library.
Trust Wallet Core is a cross-platform library that implements low-level #cryptographic wallet functionality for all supported #blockchains. Most of the code is C++ with a set of strict exported C interfaces. The library provides idiomatic interfaces for all supported #languages (currently #Swift for #iOS and #Java for #Android).
#Download #Link:-
https://github.com/trustwallet/wallet-core
GitHub
GitHub - trustwallet/wallet-core: Cross-platform, cross-blockchain wallet library.
Cross-platform, cross-blockchain wallet library. Contribute to trustwallet/wallet-core development by creating an account on GitHub.