android – hacklejandria.com

Android BotNet. C&C con Pyrebase y Flask.

22/05/202121/05/2021 por Juan Espin

Aviso legal: Este proyecto ha sido desarrollado con fines educativos. No se dará soporte o apoyo a cualquier otra finalidad. Disclaimer: This project should be used only for educational purposes. No support will be provided for any other purpose. Para construir nuestra botnet son necesarios tres componentes: el malware del bot, un servidor que haga … Leer más

Android Pentesting – Análisis Estático

11/06/202010/06/2020 por Juan Espin

Un análisis completo de una aplicacion consta de 2 partes: Análisis estático: se basa en los recursos, fichero de propiedades y código fuente de la aplicación. Análisis dinámico: se basa en el comportamiento de la aplicación durante su ejecución controlada. ANÁLISIS ESTÁTICO Análisis de permisos: Revision del fichero de configuración AndroidManifest.xml . Exploración de recursos: … Leer más

OMG cable

08/06/202008/06/2020 por Juan Espin

¿Qué es “Hardware Hacking”? El término “Hardware Hacker”, por definirlo de alguna manera va ligado a la filosofía “Do ityourself” (DIY) hazlo tu mismo, todos somos “makers”, personas con la capacidad de crear yconstruir cosas que pueden interactuar con el entorno. Ésta definición unida a la profesión que nos ocupa da lugar a la creación … Leer más

Android Pentesting – Análisis Dinamico con RMS

30/05/202105/06/2020 por Juan Espin

1 – LAB 2.0: A. Descarga e instalación de Genymotion B. Descarga e instalación de Burpsuite C. Descarga e instalación de RMS 2 – Frida: -frida-ps, frida-trace, Frida-discover y Frida-kill 3 – Runtime Mobile Security (RMS): A. Device B. Dump Tab C. Diff Classes D. Hook Lab E. Heap Search F. Custom Frida script … Leer más

Ingenieria Inversa de Apps Android con Frida y RMS

05/06/202007/05/2020 por Javier Espin

En este articulo veremos cómo aplicar ingeniería inversa a una aplicación Android, en este caso conectada a Firebase. Recuperaremos los id’s de los usuarios y a traves de la sobreescritura de metodos podremos obtener informacion real. Para ello mediante un análisis dinámico de la aplicación, obtendremos datos de usuarios registrados en la aplicación, vulnerables a … Leer más

KitPloit Feed

Crawlergo - A Powerful Browser Crawler For Web Vulnerability Scanners 15/10/2021

crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with intelligent JS event triggering, and collects as many entries exposed by the website as possible. The built-in URL de-duplication module filters out a […]

Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis 15/10/2021

NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range from thousands to billions of edges. For this purpose, it implements efficient graph algorithms, many of them parallel to utilize multicore architectures. These are meant to compute standard measures […]

ForgeCert - "Golden" Certificates 14/10/2021

ForgeCert uses the BouncyCastle C# API and a stolen Certificate Authority (CA) certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was released ~45 days after the whitepaper was published. @tifkin_ is the primary […]

Xmap - A Fast Network Scanner Designed For Performing Internet-wide IPv6 &Amp; IPv4 Network Research Scanning 14/10/2021

XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques. XMap is capable of scanning the 32-bits address space in under 45 minutes. With […]

PowerShx - Run Powershell Without Software Restrictions 13/10/2021

Unmanaged PowerShell execution using DLLs or a standalone executable. Introduction PowerShx is a rewrite and expansion on the PowerShdll project. PowerShx provide functionalities for bypassing AMSI and running PS Cmdlets. Features Run Powershell with DLLs using rundll32.exe, installutil.exe, regsvcs.exe or regasm.exe, regsvr32.exe. Run Powershell without powershell.exe or powershell_ise.exe AMSI Bypass features. Run Powershell scripts directly […]

Rdesktop - Open Source Client for Microsoft's RDP protocol 13/10/2021

rdesktop is an open source client for Microsoft's RDP protocol. It is known to work with Windows versions ranging from NT 4 Terminal Server to Windows 2012 R2 RDS. rdesktop currently has implemented the RDP version 4 and 5 protocols. Installation rdesktop uses a GNU-style build procedure. Typically all that is necessary to install rdesktop […]

Shisho - Lightweight Static Analyzer For Several Programming Languages 12/10/2021

Shisho is a lightweight static analyzer for developers. Please see the usage documentation for further information. Try at Playground You can try Shisho at our playground. Try with Docker You can try shisho in your machine as follows: echo "func test(v []string) int { return len(v) + 1; }" | docker run -i ghcr.io/flatt-security/shisho-cli:latest find […]

LinuxCatScale - Incident Response Collection And Processing Scripts With Automated Reporting Scripts 12/10/2021

Linux CatScale is a bash script that uses live of the land tools to collect extensive data from Linux based hosts. The data aims to help DFIR professionals triage and scope incidents. An Elk Stack instance also is configured to consume the output and assist the analysis process. Usage This scripts were built to automate […]

Azur3Alph4 - A PowerShell Module That Automates Red-Team Tasks For Ops On Objective 11/10/2021

Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved) position. Token extraction and many other tools will not execute successfully without starting in this position. This module should be used for further enumeration and movement in a compromised app that is part of […]

BruteLoops - Protocol Agnostic Online Password Guessing API 11/10/2021

A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces. See various Wiki sections for more information. A "modular" example is included with the library that demonstrates how to use this package. It's fully functional and provides multiple brute force modules. Below is a sample of its capabilities: […]