Gray Hat™

Websploit is a high level MITM framework $ git clone https://github.com/f4rih/websploit.git #Termux

Seclists jhaddix list Different ways to bypass access control on incorrectely protected pages. These work best on config files and global dashboards. https://github.com/Arcanum-Sec/hack_tips/blob/main/403bypass.md #InfoSecWatch

#GitHub #Tools Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection. https://github.com/ayoubfaouzi/al-khaser Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc. https://github.com/bytecode77/r77-rootkit Apache Tomcat 远程代码执行漏洞批量检测脚本(CVE-2025-24813) https://github.com/iSee857/CVE-2025-24813-PoC CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taking, automated data linking, interactive visualizations, and robust access control. Enhance your CTI workflow from analysis to reporting—all in one secure space. https://github.com/prodaft/cradle #HackersFactory

The Linux Command Line. Get your PDF copy: https://linuxcommand.org/tlcl.php #grayhats

Cam-Dumper is a tool that runs on the Linux-based operating system called termux. It enables users to capture images from the front camera of a targeted individual and receive those images in their termux by sharing a link. This tool is designed for situations where someone is engaging in negative activities online, and you want to obtain their real image as evidence. Cam-Dumper utilizes straightforward javascript to accomplish this task effectively. • git clone https://github.com/LiNuX-Mallu/CAM-DUMPER.git #Termux

WebScrape | This is a web scraping tool that is programmed in bash scripting language. It has been designed with comprehensive error handling capabilities. Web scraping is a method used to gather a significant amount of data from websites. It involves extracting specific information from web pages and saving it to a file on your computer. This data can then be utilized for various purposes. • git clone https://github.com/3xploitGuy/webscrape.git #Termux

0day Today is the ultimate database of exploits and vulnerabilities https://0day.today #InfoSecWatch

METASPLOIT:- The Penetration Tester’s Guide. https://drive.google.com/file/d/1Tz5i5hWLXn16fn69Wkkv0wDXswJj4i5s/view?usp=sharing #grayhats

Repository of Bug-Bounty Writeups. https://github.com/fardeen-ahmed/Bug-bounty-Writeups #HackersFactory

A collection of useful lists for Penetration Testing & Bug Bounty - Content Discovery, Payloads, Variables, Sandbox Escaping, etc. https://github.com/nu11pointer/fuzzlists #HackersFactory

Auto Change Tor IP This tool automates the process of periodically changing the Tor IP address. Basically it enters a loop where it continuously fetches a new IP address through Tor proxies. Restart tor service, and you got a new IP :D https://github.com/isPique/Tor-IP-Changer #InfoSecWatch

Single-Click-Proxychains https://github.com/efxtv/Single-Click-Proxychains-Ubuntu-KaliLinux #InfoSecWatch #HackersForum

50 Important Abbreviations in CyberSecurity *CIA - Confidentiality, Integrity, Availability *IDS - Intrusion Detection System *IPS - Intrusion Prevention System *WAF - Web Application Firewall *PII - Personal Identifiable Information *DoS - Denial of Service *DDoS - Distributed Denial of Service *DNS - Domain Name System *ZTA - Zero Trust Architecture *NAT - Network Address Translation *CTF - Capture the Flag *ACL - Access Control List *CDN - Content Delivery Network *CVE - Common Vulnerabilities and Exposures *RAT - Remote Access Trojan *APT - Advanced Persistent Threat *ATP - Advanced Threat Protection *SSO - Single Sign-on *URL - Uniform Resource Locator *TLS - Transport Layer Security *ARP - Address Resolution Protocol *RDP - Remote Desktop Protocol *FTP - File Transfer Protocol *SFTP - Secure File Transfer Protocol *HTTP - Hypertext Transfer Protocol *HTTPS - Hypertext Transfer Protocol Secure *LDAP - Lightweight Directory Access Protocol *MFA - Multi-factor Authentication *IAM - Identity and Access Management *SIEM - Security Information and Event Management *SAM - Security Account Manager *MDM - Mobile Device Management *XXS - Cross Site Scripting *XSRF - Cross Site Request Forgery *DRaaS - Disaster Recovery as a Service *DLP - Data Loss Prevention *TCP - Transmission Control Protocol *SNMP - Simple Network Management Protocol *L2TP - Layer 2 Tunneling Protocol *SOC - Security Operations Center *EDR - Endpoint Detection and Response *MDR - Managed Detection and Response *KMS - Key Management Service *TOR - The Onion Router *UEBA - User and Entity Behavior Analytics *UEFI - Unified Extensible Firmware Interface *RFI - Remote File Inclusion *SSID - Service Set Identifier *LAN - Local Area Network *WAN - Wide Area Network *VLAN - Virtual Local Area Network *PGP - Pretty Good Privacy *MiTM - Man in the Middle Attack *CA - Certificate Authority *MAC - Mandatory Access Control *PUA - Potential Unwanted Application *ECDH - Elliptic Curve Deffie-Hellman *BYOD - Bring Your Own Device *GDPR - General Data Protection Regulation *ADFS - Active Directory Federation Service *EPP - Endpoint Protection Platform *DMARC - Domain Based Message Authentication, Reporting and Conformance *UAC - User Account Control *CLI - Command Line Interface #grayhats

SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ] https://github.com/samsesh/SocialBox-Termux.git #Termux

MaskPhish is not any Phishing tool. It's just a proof of concept of "URL Making Technology". It is a simple Bash Script to hide phishing URL under a normal looking URL (google.com or facebook.com). It can be integrated into Phishing tools (with proper credits) to look the URL ledgit. https://github.com/jaykali/maskphish #Termux

IP-Tracer is used to track an ip address. IP-Tracer is developed for Termux and Linux based systems. you can easily retrieve ip address information using IP-Tracer. IP-Tracer use ip-api to track ip address. https://github.com/rajkumardusad/IP-Tracer.git #Termux

Hacklock is a bash based script which is officially termux from this tool in just one click you can generate pattern phishing tool which can hack victim pattern and. This tool works on both rooted Android device and Non-rooted Android device. https://github.com/noob-hackers/hacklock #Termux

The Virus-Builder tool is a sophisticated program designed to create destructive malware specifically targeting Windows operating systems. This tool allows users to customize and configure the virus to automatically execute when inserted into a USB drive, increasing the potential for spreading the malware to other systems. [+] git clone https://github.com/Cyber-Dioxide/Virus-Builder/ #Termux

TermuX Custom on GitHub offers advanced customization options for TermuX users, including personalized login screens, sound effects, and shell name changes for a dynamic experience. To start, just follow the instructions given to update and enhance your TermuX setup, copy the TermuX Custom repository, and run the setup script to add the customized features. This repository is meant for educational use only and does not support any harmful actions. [+] apt update && apt upgrade [+] pkg install git [+] git clone https://github.com/Cod3r-Ak/TermuX-Custom [+] cd TermuX-Custom [+] chmod +x * [+] bash setup.sh #Termux