[SterJo Key Finder v.1.6] Tool to recover lost product keys

SterJo Key Finder is a small and FREE application that can recover lost product keys. All you have to do is run the program and it will find the keys for you in a few seconds. The software is currently able to recover a large number of keys like Microsoft Windows, Microsoft Office, WinZip, Corel Draw, CyberLink PowerDVD, Nero, VMWare Workstation, Techsmith Camtasia Studio, AUTOCAD and many more... After the recovering is done the user could...

Read More

[Outlook Password Dump] Tool to quickly recover lost email passwords from all versions of Microsoft Outlook

Outlook Password Dump is the free command-line tool to quickly recover lost email passwords from all versions of Microsoft Outlook.Outlook stores passwords for all the configured mail accounts on your system. These passwords are stored in the encrypted format and only respective user can decrypt it.Outlook Password Dump tool helps you to instantly decrypt and recover all these stored mail passwords.Also it can decrypt passwords from different...

Read More

[Mellivora] Basic database driven CTF engine

Mellivora is a basic database driven CTF engine written in PHP.RequirementsLAMP: PHP 5.3+, MySQL 5.5+, Apache 2.2+. May work with other configurations but this is untested.InstallationDownload to any directory, say: "/var/www/mellivora/".Create an Apache VHost and point DocumentRoot to "htdocs/". An example Apache config can be found in the "install/" directory.Create a database and import the structure from "install/db.sql".Edit "config.inc.php" and "db.inc.php" in "config/".Make the "writable/" directory and subdirectories writable by Apache...

Read More

[Web-Sorrow v1.5] Versatile security scanner for the information disclosure and fingerprinting phases of pentesting

Web-Sorrow is a perl based tool for misconfiguration, version detection, enumeration, and server information scanning. It's entirely focused on Enumeration and collecting Info on the target server. Web-Sorrow is a "safe to run" program, meaning it is not designed to be an exploit or perform any harmful attacks.Web Services: a CMS and it's version number, Social media widgets and buttons, Hosting provider, CMS plugins, and favicon fingerprintsAuthentication...

Read More

[Wi-Fi Password Key Generator] Wireless WEP/WPA/WPA2 Security Key Maker Tool

WiFi Password Key Generator is the free desktop tool to quickly create secure Wireless WEP/WPA/WPA2 keys.Most devices (Modems/Routers) require you to enter WEP/WPA keys during Wireless security configuration. Unlike regular passwords, these keys have strict length requirements based on type of security mechanism (WEP, WPA, WPA2 etc).In such cases, 'Wi-Fi Password Key Generator' can help you to easily generate these keys. It supports all types of...

Read More

[SterJo Wireless Passwords v.1.4] Utility for recovering your lost wireless passwords of your network

SterJo Wireless Password is FREE utility for recovering your lost wireless passwords of your network.As the number of devices using wireless network increases same as the need for more security, it often may happen your password containing letters, numbers and special characters to be forgotten in time. So instead of completely resetting everything and creating a new password there is a much simpler solution.All you have to do is run SterJo Wireless...

Read More

[Doona] Network Protocol Fuzzer

Doona is a fork of the Bruteforce Exploit Detector, it was renamed to avoid confusion as it has a large number of of changes. You should get a copy from github if you want to try it: https://github.com/wireghoul/doona.It's currently a little short on documentation, so I will let the changelog details some of the many differences between Doona and BED:[ 0.7 ]- resolved the need for a hardcoded plugin list- added max requests option to allow parallel execution (easier than hacking in thread support)- added sigpipe handler to prevent silent exit...

Read More

[Binwalk v1.2.2] Firmware Analysis Tool

Binwalk is a firmware analysis tool designed to assist in the analysis, extraction, and reverse engineering of firmware images and other binary blobs. It is simple to use, fully scriptable, and can be easily extended via custom signatures, extraction rules, and plugin modules. Binwalk supports various types of analysis useful for inspecting and reverse engineering firmware, including: Embedded file identification and extraction Executable code...

Read More

[Facebook Password Decryptor v5.5 ] Facebook Password Recovery Software

Facebook Password Decryptor is the FREE software to instantly recover Facebook account passwords stored by popular Web Browsers and Messengers.It is one of our most popular software with over One Million Downloads worldwide.Here is the complete list of supported applications. Internet Explorer (v4.0 - v10.0) FirefoxGoogle ChromeChrome Canary/SXSCoolNovo BrowserOpera BrowserApple SafariFlock BrowserComodo Dragon BrowserSeaMonkey...

Read More

[SterJo Startup Patrol v.1.3] Disable software that delayed the boot time

Often may happen your PC to run a little slower than usual. Don't worry, it is nothing serious. You’ve probably installed some software that delayed the boot time.SterJo Startup Patrol allows you to view those files and disable them. This way you can optimize the Windows startup time but be careful not to disable some crucial programs you are using. By blocking those unneeded files the system will definitely run faster and smoother.The software...

Read More

[TinySHell] Ported to SCTP

You may have seen, a while ago, my post on SCTP reverse shells.I realized quite quickly that I should definately do some more research in this direction, and hence ported one of my favourite Unix backdoors (which uses a TCP connection) to use a SCTP connection instead. This backdoor allows for a remote PTY, file upload, and file download. It also is encrypted connection.The backdoor in question is ‘TinySHell’ by the inestimable Christophe Devine...

Read More

[IPv6 Disable Tool] Command-line Software to Enable or Disable IPv6 on Windows

IPv6 Disable is the free command-line tool to quickly Enable or Disable IPv6 (Internet Protocol version 6) on your Windows system.It automatically checks for the current status of IPv6 and then enable/disable it accordingly. It is simple & easy to use tool. Also being a command-line based tool makes it perfect for automation and to use on remote systems.Download IPv6 Disable v1.5       &nb...

Read More

WHMCS 0day Auto Exploiter <= 5.2.8

inurl:submitticket.php site:.cominurl:submitticket.php site:.netinurl:submitticket.php site:.usinurl:submitticket.php site:.euinurl:submitticket.php site:.orginurl:submitticket.php site:.ukintext:"Powered by WHMCompleteSolution"intext:"Powered by WHMCompleteSolution" inurl:clientarea.phpinurl:announcements.php intext:"WHMCompleteSolution"intext:"Powered by WHMCS"Here is the PHP code that you must save as WHMCS-Fucker.php:http://adf.ly/144PJThttp://adf.ly/144PGyhttp://adf.ly/144PLQ...

Read More

[Ghiro v0.1] Digital Image Forensic Analyzer

Sometime forensic investigators need to process digital images as evidence. There are some tools around, otherwise it is difficult to deal with forensic analysis with lot of images involved. Images contain tons of information, Ghiro extracts these information from provided images and display them in a nicely formatted report.Dealing with tons of images is pretty easy, Ghiro is designed to scale to support gigs of images.All tasks are totally automated,...

Read More

[SterJo Task Manager v.2.6] Advanced utility for process managing

SterJo Task Manager is a FREE an advanced utility for process managing which allows you to get details on everything that’s running on your computer. The program is divided in several sections covering the main parts of each system. “Processes” gives you more details about all processes and also could show the CPU usage of each process with an option to terminate it and retrieve the speed of the computer.Anyway if the startup of your system is...

Read More

[AxCrypt] Open Source Windows File Encryption Software

AxCrypt is the leading open source Windows file encryption software. It integrates seamlessly with Windows to compress, encrypt, decrypt, store, send and work with individual files.Personal Privacy and Security with AES-128 File Encryption and Compression for Windows 2000/2003/XP/Vista/2008/7. Double-click to automatically decrypt and open documents. Store strong keys on removable USB-devices.FeaturesPassword Protect any number of files using...

Read More

[FruityWifi v1.0] Wireless network auditing tool

FruityWifi is a wireless network auditing tool based in the wifi Pineapple. The application can be installed in any Debian based system adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi).ServicesWireless: Start|Stop wireless access point. (hostapd)Supplicant: Connects to the internet using a wireless interfaceKarma: REF: http://www.digininja.org/karma/URL Snarf: Start|Stop urlsnarfURL Spoof:...

Read More

[Router Password Decryptor] Tool to Recover Login/PPPoE/WEP/WPA/WPA2 Passwords from Router/Modem Config file

Router Password Decryptor is the FREE tool to instantly recover internet login/PPPoE authentication passwords, Wireless WEP keys, WPA/WPA2 Passphrases from your Router/Modem configuration file.Currently it supports password recovery from following type of Routers/Modems Cisco Juniper DLink BSNLIn addition to this, it also has unique 'Smart Mode' feature (experimental) to recover passwords from any type of Router/Modem configuration...

Read More

[SterJo NetStalker v.1.0] Security software able to detect all authorized and unauthorized connections

SterJo NetStalker is innovative and FREE security software able to detect all authorized and unauthorized connections to your computer and send you alert for each new connection.The software is based on similar principles as most firewalls work and also could create a custom security policies with an advantage to run it totally portable. It serves as an entry point into your computer and instantly informs you about all the processes able to...

Read More

Nmap CheatSheet

Download [PDF] Nmap CheatSheet By S...

Read More

[Firebind Reflector v0.53] Portable Network Path Scanning Tool

Firebind Reflector is a portable network path scanning tool that can profile firewall and other network device rules for port blocking, such as perform egresss/exfiltration testing. Reflector has a client side and listener (server-side) like Netcat and Ncat, except Reflector can dynamically be told by the client to listen on any or all 65,535 TCP or UDP ports, while supporting up to several hundred simultaneous client scans.All components of Reflector...

Read More

[WiFi Password Dump] Command-line Tool to Recover Wireless Passwords

WiFi Password Dump is the free command-line tool to quickly recover all the Wireless account passwords stored on your system.It automatically recovers all type of Wireless Keys/Passwords (WEP/WPA/WPA2 etc) stored by Windows Wireless Configuration Manager. For each recovered WiFi account, it displays following information WiFi Name (SSID) Security Settings (WEP-64/WEP-128/WPA2/AES/TKIP)Password TypePassword in Hex formatPassword in clear text ...

Read More

[Mutator v0.2.2.1] Wordlist mutator

This project aims to be a wordlist mutator with hormones, which means that somemutations will be applied to the result of the ones that have been already done,resulting in something like:corporation -> C0rp0r4t10n_2012This software is usefull when applied to a few words, like company name and/ordomain name targeted or the usernames of the system administrators. You mustthink that the number of wrds resulting of applying all mutations is exponential:...

Read More

[Browser Password Decryptor v5.5] Software to instantly recover website login passwords stored by popular web browsers

Browser Password Decryptor is the FREE software to instantly recover website login passwords stored by popular web browsers.Currently it can recover saved login passwords from following browsers. FirefoxInternet ExplorerGoogle ChromeGoogle Chrome Canary/SXSCoolNovo BrowserOpera BrowserApple SafariComodo Dragon BrowserSeaMonkey BrowserFlock Browser For command-line version, check out our new tool - Browser Password Dump.Features:Instantly...

Read More

[LinEnum v0.2] Automating local information gathering tasks on Linux hosts

LinEnum is a shell script that automates local information gathering tasks on Linux hosts.Over 65 checks are performed, obtaining anything from kernel information to locating possible escalation points such as potentially useful SUID/GUID files and Sudo/rhost mis-configurations etc.Additionally, the script will also use a provided keyword to search through *.conf and *.log files. Any matches will be displayed along with the full file path and line...

Read More

[Dumpper v.30.2] Gestor de redes wireless

Dumpper es un gestor de redes wireless con el que podemos conectarnos a nuestra red, entre otras cosas. Abrimos el programa, le damos a "Escanear" y saldran en pantalla las redes disponibles, seleccionamos la nuestra e introducimos la clave en la casilla "Key", luego le damos a "Conectar" y listo. Tambien he puesto una funcion que muestra las claves por defecto de las redes WLAN_XXXX y JAZZTEL_XX con macs compatibles. También he incluido un gestor...

Read More

[Sandy v0.1] Open-source Samsung phone encryption assessment framework

Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbycon 3.0 presentation (What’s common in Oracle and Samsung? They tried to think differently about crypto).RequirementsIt was developed with python 2.7.Most of the modules works on OSX.Every modules should work on Kali Linux.You need...

Read More

[WFacebook] Facebook Password Cracker

Facebook Password Cracker.Video:Download WFaceb...

Read More

[PoshSec Framework v0.2] Graphical Interface for Powershell scripts

The PoshSec Framework is a tool that is designed to provide a graphical interface for powershell scripts, functions, modules, and cmdlets.It allows the community to write scripts that can interact with the interface by providing alerts, and output directly from their powershell scripts. This framework can be used for offensive, defensive, or simply system administrative tasks.The PoshSec Framework is not merely a defense tool. It can be used for...

Read More

[jSQL Injection v0.5] Java tool for automatic database injection

jSQL Injection is a lightweight application used to find database information from a distant server.jSQL is free, open source and cross-platform (Windows, Linux, Mac OS X, Solaris).jSQL Injection change log - version 0.5 0.5 SQL shell Uploader 0.4 Admin page checker and preview Brute forcer (md5 mysql...) Coder (encode decode base64 hex md5...) 0.3 Distant file reading Webshell deposit Terminal for webshell commands Configuration backup Update checker...

Read More

[Matriux Leandros v3.0 rc1] The pentesting distrib (Now added Blackhat Arsenal 2013 Tools)

Matriux is a Debian-based security distribution designed for penetration testing and forensic investigations. Although it is primarily designed for security enthusiasts and professionals, it can also be used by any Linux user as a desktop system for day-to-day computing. Besides standard Debian software, Matriux also ships with an optimised GNOME desktop interface, over 340 open-source tools for penetration testing, and a custom-built Linux kernel.Matriux...

Read More

[Kvasir] Tools for effective data management during a Penetration Test

Welcome to Kvasir! Herein these directories lay the groundwork tools for effective data management during a Penetration Test.Penetration tests can be data management nightmares because of the large amounts of information that is generally obtained. Vulnerability scanners return lots of actual and potential vulnerabilitites to review. Port scanners can return thousands of ports for just a few hosts. How easy is it to share all this data with your...

Read More

[Hook Analyser v2.6] Application (and Malware) Analysis tool

Application (and Malware) Analysis tool. Hook Analyser is a hook tool which could be potentially helpful in reversing application and analysing malwares.Changelog v2.6Added new signatures (and removed redundant ones)Bug fixes – Many thanks for community users to reporting them.Fixed start-up error.More Information:http://hookanalyser.blogspot.comDownload Hook Analyser v...

Read More