Ethical Hackers Vol. 2

Tool for obfuscating PowerShell (https://www.kitploit.com/search/label/PowerShell) scripts written in Go. The main objective of this program is to obfuscate PowerShell (https://www.kitploit.com/search/label/PowerShell) code to make its analysis (https://www.kitploit.com/search/label/Analysis) and detection more difficult. The script offers 5 levels of obfuscation (https://www.kitploit.com/search/label/Obfuscation), from basic obfuscation (https://www.kitploit.com/search/label/Obfuscation) to script fragmentation. This allows users to tailor the obfuscation (https://www.kitploit.com/search/label/Obfuscation) level to their specific needs. ./psobf -h ██████╗ ███████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝███████╗██║ ██║██████╔╝█████╗ ██╔═══╝ ╚════██║██║ ██║██╔══██╗██╔══╝ ██║ ███████║╚██████╔╝██████╔╝██║ ╚═╝ ╚══════╝ ╚═════╝ ╚═════╝ ╚═╝ @TaurusOmar v.1.0 Usage: ./obfuscator -i -o -level Options: -i string Name of the PowerShell script file. -level int Obfuscation level (1 to 5). (default 1) -o string Name of the output file for the obfuscated script. (default "obfuscated.ps1") Obfuscation levels: 1: Basic obfuscation by splitting the script into individual characters. 2: Base64 encoding of the script. 3: Alternative Base64 encoding with a different PowerShell decoding method. 4: Compression and Base64 encoding of the script will be decoded and decompressed at runtime. 5: Fragmentation of the script into multiple parts and reconstruction at runtime. Features: Obfuscation Levels: Four levels of obfuscation, each more complex than the previous one. Level 1 obfuscation by splitting the script into individual characters. Level 2 Base64 encoding of the script. Level 3 Alternative Base64 encoding with a different PowerShell decoding method. Level 4 Compression and Base64 encoding of the script will be decoded and decompressed at runtime. Level 5 Fragmentation of the script into multiple parts and reconstruction at runtime. Compression and Encoding: Level 4 includes script compression before encoding it in base64. Variable Obfuscation: A function was added to obfuscate the names of variables in the PowerShell script. Random String Generation: Random strings are generated for variable name obfuscation.

Psobf - PowerShell Obfuscator http://www.kitploit.com/2024/09/psobf-powershell-obfuscator.html

ModTracer Finds Hidden (https://www.kitploit.com/search/label/Hidden) Linux (https://www.kitploit.com/search/label/Linux) Kernel (https://www.kitploit.com/search/label/Kernel) Rootkits and then make visible again. Another way to make an LKM visible is using the imperius trick: https://github.com/MatheuZSecurity/Imperius Download ModTracer (https://github.com/MatheuZSecurity/ModTracer)

ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again http://www.kitploit.com/2024/09/modtracer-modtracer-finds-hidden-linux.html

Thanks Special thanks to @akaclandestine (https://x.com/akaclandestine) Download DockerSpy (https://github.com/UndeadSec/DockerSpy)

Users are responsible for ensuring that their use of this tool complies with applicable laws and regulations. Contribution Contributions to DockerSpy are welcome! Feel free to submit issues, feature requests, or pull requests to help improve this tool. About the Author DockerSpy is developed and maintained by Alisson Moretto (UndeadSec) I'm a passionate cyber threat intelligence pro who loves sharing insights and crafting cybersecurity (https://www.kitploit.com/search/label/Cybersecurity) tools. Consider following me:

DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication (https://www.kitploit.com/search/label/Authentication) secrets, private keys, and more. What is Docker? Docker is an open-source platform that automates the deployment, scaling, and management of applications using containerization technology. Containers allow developers to package an application and its dependencies into a single, portable unit that can run consistently across various computing environments. Docker simplifies the development and deployment process by ensuring that applications run the same way regardless of where they are deployed. About Docker Hub Docker Hub is a cloud-based repository where developers can store, share, and distribute container images. It serves as the largest library of container images, providing access to both official images created by Docker and community-contributed images. Docker Hub enables developers to easily find, download, and deploy pre-built images, facilitating rapid application development and deployment. Why OSINT on Docker Hub? Open Source Intelligence (https://www.kitploit.com/search/label/Intelligence) (OSINT) on Docker Hub involves using publicly available information to gather insights and data from container images and repositories hosted on Docker Hub. This is particularly important for identifying exposed secrets for several reasons: Security Audits: By analyzing Docker images, organizations can uncover exposed secrets such as API keys, authentication tokens, and private keys that might have been inadvertently included. This helps in mitigating potential security risks. Incident Prevention: Proactively searching for exposed secrets in Docker images can prevent security breaches before they happen, protecting sensitive information and maintaining the integrity of applications. Compliance: Ensuring that container images do not expose secrets is crucial for meeting regulatory and organizational security standards. OSINT helps verify that no sensitive information is unintentionally disclosed. Vulnerability (https://www.kitploit.com/search/label/Vulnerability) Assessment: Identifying exposed secrets as part of regular security assessments allows organizations to address these vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) promptly, reducing the risk of exploitation by malicious actors. Enhanced Security Posture: Continuously monitoring Docker Hub for exposed secrets strengthens an organization's overall security posture, making it more resilient against potential threats. Utilizing OSINT on Docker Hub to find exposed secrets enables organizations to enhance their security measures, prevent data breaches, and ensure the confidentiality of sensitive information within their containerized applications. Thousands of images on Docker Hub leak auth secrets, private keys (https://www.bleepingcomputer.com/news/security/thousands-of-images-on-docker-hub-leak-auth-secrets-private-keys/) Docker Hub images found to expose secrets and private keys (https://www.threatdown.com/blog/docker-hub-images-found-to-expose-secrets-and-private-keys/) How DockerSpy Works DockerSpy obtains information from Docker Hub and uses regular expressions to inspect the content for sensitive information, such as secrets. Getting Started To use DockerSpy, follow these steps: Installation: Clone the DockerSpy repository and install the required dependencies. git clone https://github.com/UndeadSec/DockerSpy.git && cd DockerSpy && make Usage: Run DockerSpy from terminal. dockerspy Custom Configurations To customize DockerSpy configurations, edit the following files: - Regular Expressions (https://github.com/UndeadSec/src/configs/regex_patterns.json) - Ignored File Extensions (https://github.com/UndeadSec/src/configs/ignore_extensions.json) Disclaimer DockerSpy is intended for educational and research purposes only.

DockerSpy - DockerSpy Searches For Images On Docker Hub And Extracts Sensitive Information Such As Authentication Secrets, Private Keys, And More http://www.kitploit.com/2024/09/dockerspy-dockerspy-searches-for-images.html

Credits hackertarget (https://hackertarget.com/) Download Ashok (https://github.com/powerexploit/Ashok)

Main Features - Wayback Crawler Machine - Google Dorking without limits - Github Information Grabbing - Subdomain Identifier - Cms/Technology Detector With Custom Headers Installation ~> git clone https://github.com/ankitdobhal/Ashok ~> cd Ashok ~> python3.7 -m pip3 install -r requirements.txt How to use Ashok? A detailed usage guide is available on Usage (https://github.com/ankitdobhal/Ashok/wiki/Usage) section of the Wiki (https://github.com/ankitdobhal/Ashok/wiki). But Some index of options is given below: Extract Http Headers from single url (https://github.com/ankitdobhal/Ashok/wiki/Usage#Extract-Http-Headers-from-single-url) Dump internet-archive machine with json output for single url (https://github.com/ankitdobhal/Ashok/wiki/Usage#dump-internet-archive-machive-with-json-output-for-single-url) Google dorking using number of results as dorknumber (https://github.com/ankitdobhal/Ashok/wiki/Usage#Google-dorking-using-number-of-results-as-dorknumber) Dns Lookup of single target domain (https://github.com/ankitdobhal/Ashok/wiki/Usage#Dns-Lookup-of-single-target-domain) Subdomain Lookup of single target domain (https://github.com/ankitdobhl/Ashok/wiki/Usage#Subdomain-Lookup-of-single-target-domain) Port Scan using nmap of single target domain (https://github.com/ankitdobhal/Ashok/wiki/Usage#Port-Scan-using-nmap-of-single-target-domain) Extract data using Github username of target (https://github.com/ankitdobhal/Ashok/wiki/Usage#Extract-data-using-Github-username-of-target) Detect Cms of target url (https://github.com/ankitdobhal/Ashok/wiki/Usage#Detect-Cms-of-target-url) Docker Ashok can be launched using a lightweight Python3.8-Alpine Docker image. $ docker pull powerexploit/ashok-v1.2 $ docker container run -it powerexploit/ashok-v1.2 --help

Reconnaissance is the first phase of penetration testing which means gathering (https://www.kitploit.com/search/label/Gathering) information before any real attacks are planned So Ashok is an Incredible fast recon tool for penetration tester which is specially designed for Recon ( https:=)naissance" title="Recon (https://www.kitploit.com/search/label/Recon)naissance">Recon (https://www.kitploit.com/search/label/Recon)naissance phase. And in Ashok-v1.1 (https://github.com/ankitdobhal/Ashok/releases) you can find the advanced google (https://github.com/ankitdobhal/Ashok/wiki/Usage#Google-dorking-using-number-of-results-as-dorknumber)dorker (https://www.kitploit.com/search/label/Dorker) and wayback (https://github.com/ankitdobhal/Ashok/wiki/Usage#dump-internet-archive-machive-with-json-output-for-single-url)crawling (https://www.kitploit.com/search/label/Crawling) machine.

Ashok - A OSINT Recon Tool, A.K.A Swiss Army Knife http://www.kitploit.com/2024/06/ashok-osint-recon-tool-aka-swiss-army.html

How to contribute Add a module or fix something and then pull request. Share it with whomever you believe can use it. Do the extra work and share your findings with community ♥ FAQ How to make the best out of this tool? Read the usage. I get errors; what should I do? Make sure you read the usage correctly, and if you think you found a bug open an issue. When I use proxies, I get too many errors, or it's too slow? It's because you use public proxies, use private and higher quality proxies. You can use ProxyFor (https://github.com/0xsha/proxyfor) to verify the good proxies with your chosen provider. too fast or too slow ? change -T (timeout) option to get best results for your run. Credits Inspired by every single repo listed here (https://github.com/mxm0z/awesome-sec-s3) . Download CloudBrute (https://github.com/0xsha/CloudBrute)

-c --cloud force a search, check config.yaml providers list -t --threads number of threads. Default: 80 -T --timeout timeout per request in seconds. Default: 10 -p --proxy use proxy list -a --randomagent user agent randomization -D --debug show debug logs. Default: false -q --quite suppress all output. Default: false -m --mode storage or app. Default: storage -o --output Output file. Default: out.txt -C --configFolder Config path. Default: config for example CloudBrute -d target.com -k target -m storage -t 80 -T 10 -w "./data/storage_small.txt" please note -k keyword used to generate URLs, so if you want the full domain to be part of mutation, you have used it for both domain (-d) and keyword (-k) arguments If a cloud provider not detected or want force searching on a specific provider, you can use -c option. CloudBrute -d target.com -k keyword -m storage -t 80 -T 10 -w -c amazon -o target_output.txt Dev Clone the repo go build -o CloudBrute main.go go test internal in action