what should the next malware/tool be?
Anonymous Poll
0%
dnp3 fuzzer
0%
s7 fuzzer
0%
gsm fuzzer
60%
ring 0 rootkit for windows
20%
windows privillege escalator
7%
linux privillege escalator
13%
auto web fuzzer
0%
auto network fuzzer
ZeroCipher
m_fuzzer_pro.py
modbus fuzzer is updated!
version 3.0.0
2 techniques added to tool
fix and debugged features
version 3.0.0
2 techniques added to tool
fix and debugged features
ZeroCipher
modbus fuzzer is updated! version 3.0.0 2 techniques added to tool fix and debugged features
The tool was renamed "volt fuzzer" in version 4.0.0.
In version 4.0.0, the tool is capable of scanning and fuzzing vulnerabilities across two protocols (the DNP3 protocol has been added).
More than 10 new techniques have been added in version 4.0.0.
In version 4.0.0, the tool is capable of scanning and fuzzing vulnerabilities across two protocols (the DNP3 protocol has been added).
More than 10 new techniques have been added in version 4.0.0.
After about two weeks of patching, debugging, and fixing the codes the first version of phoenix_rk is finally being uploaded tonight.
I have now completed and released the rootkit I previously promised to develop.
Next is the deployment file; it has specific execution requirements, but its purpose is to allow you to easily control the rootkit without the hassle of manually launching it. However, for this to work, parts 2 through 6 must be compiled and converted into drivers.
Additionally, all vulnerable drivers must be placed in the
Next is the deployment file; it has specific execution requirements, but its purpose is to allow you to easily control the rootkit without the hassle of manually launching it. However, for this to work, parts 2 through 6 must be compiled and converted into drivers.
Additionally, all vulnerable drivers must be placed in the
drivers folder. This project—phoenix_root—is part of the massive nightfury project 💤.🔥3
Instructions:
Vulnerable drivers: RTCore64.sys AsrDrv.sys GLCKIO2.sys
After placing the vulnerable drivers into the
You may add a client if needed, and you can utilize a C2 (Command & Control) system of your choice.
The Telnet password for the remote control panel is
Vulnerable drivers: RTCore64.sys AsrDrv.sys GLCKIO2.sys
After placing the vulnerable drivers into the
drivers folder (located within the compiled driver directory derived from parts 2 through 6), you must compile phoenix_service.c and place the resulting executable file in the same root folder where the deployment file is located. You may add a client if needed, and you can utilize a C2 (Command & Control) system of your choice.
The Telnet password for the remote control panel is
nightfury_admin_2026.🔥4
Forwarded from 𝚃𝚖|𝙴𝚡𝚙𝚕𝚘𝚒𝚝
SysPeek یه ابزار خط فرمان ویندوزی برای تحلیل امنیتی و شناسایی تهدیداته
https://github.com/batmanpriv/SysPeek
✅ اسکن پروسسها و DLLها با تأیید امضا
✅ شکار LOLBinها و LSASS dumping
✅ تشخیص ردپای باجافزار و persistence
✅ اتصالات شبکه به همراه پروسسها
✅ Baseline & Diff برای مشاهدهی تغییرات
✅ نظارت لحظهای روی پروسسها و پوشهها
✅ خروجی JSON، CSV و HTML
✅ Threat Score و نگاشت به MITRE ATT&CK
https://github.com/batmanpriv/SysPeek
Forwarded from ＥｓＦｅｌＵｒＭ
SysPeek
A blue-team recon & threat-detection toolkit for Windows
Git: https://github.com/batmanpriv/SysPeek
A blue-team recon & threat-detection toolkit for Windows
SysPeek digs into what's actually running on a Windows host — processes, DLLs, drivers, persistence mechanisms, network connections — and instead of dumping raw data on you, it tells you why something deserves a second look. 🎯
Built for SOC analysts and incident responders who need to walk up to an unfamiliar box and answer "what's really going on here?" in minutes, not hours
Git: https://github.com/batmanpriv/SysPeek
🔥4❤1
Should we update the Phoenix Root project or move on to another one?
Anonymous Poll
56%
Lets move on to another one
44%
No this one is fine
𝚃𝚖|𝙴𝚡𝚙𝚕𝚘𝚒𝚝
اینکه بیای یه ماینر مونرو بفروشی دیگه خیلی فوله از XMRig که قوی تر نزدی با اون همه مشترک پول چیو میگیری پنل؟
به قول دوستمون با این اوضاع مملکت دیگه نیازی به کلاهبردار نیست ایران فول آپشنه
👍6
ZeroCipher
voltfuzz_newversion.py
A new version of the Modbus fuzzer has been released under the new name "Volt Fuzzer"
Addition of several techniques for the Modbus protocol
Addition of the DNP3 protocol to the fuzzer
Automatic protocol detection for a smoother fuzzing process
Support for adding RTU functionality across Windows, Linux, and Android
Use of standard libraries to ensure ease of execution for users
Addition of several techniques for the Modbus protocol
Addition of the DNP3 protocol to the fuzzer
Automatic protocol detection for a smoother fuzzing process
Support for adding RTU functionality across Windows, Linux, and Android
Use of standard libraries to ensure ease of execution for users
🔥3
ZeroCipher
Rootkits - Subverting the Windows Kernel (1).pdf
This book is for rootkit development
if you want to develop a rootkit be sure to read it
it is very useful
if you want to develop a rootkit be sure to read it
it is very useful
Forwarded from ＥｓＦｅｌＵｒＭ
Tired of ZIP and RAR? Meet maxzip \(^_^)/
It's got 5 compression engines (zstd, xz, brotli, lz4, deflate), picks the best one automatically, removes duplicate data, encrypts with AES-256, and fits in a single file with zero dependencies.
Oh and it actually tests before compressing — no more guessing by file extension.
Check it out: github.com/batmanpriv/maxzip
It's got 5 compression engines (zstd, xz, brotli, lz4, deflate), picks the best one automatically, removes duplicate data, encrypts with AES-256, and fits in a single file with zero dependencies.
Oh and it actually tests before compressing — no more guessing by file extension.
Check it out: github.com/batmanpriv/maxzip
🔥3