TheCyb3rAlpha / BobTheSmugglerLinks
"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).
☆554Updated 6 months ago
Alternatives and similar repositories for BobTheSmuggler
Users that are interested in BobTheSmuggler are comparing it to the libraries listed below
Sorting:
- ☆562Updated last year
- Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Direc…☆430Updated 6 months ago
- A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.☆377Updated last month
- ☆298Updated last year
- A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented b…☆421Updated last year
- Wordlist to crack .zip-file password☆204Updated 3 years ago
- Compiled tools for internal assessments☆356Updated last week
- Weaponized Browser-in-the-Middle (BitM) for Penetration Testers☆550Updated 4 months ago
- A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them bi…☆480Updated 6 months ago
- A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.☆756Updated 8 months ago
- A RedTeam Toolkit☆407Updated last month
- A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…☆801Updated 5 months ago
- Bear C2 is a compilation of C2 scripts, payloads, and stagers used in simulated attacks by Russian APT groups, Bear features a variety of…☆416Updated last month
- EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offer…☆372Updated last year
- ☆314Updated last year
- This is for Ethical Use only.☆432Updated 3 months ago
- C2 infrastructure over Microsoft Teams.☆716Updated 8 months ago
- Lab used for workshop and CTF☆271Updated last month
- A python tool to automate KeePass discovery and secret extraction.☆502Updated 9 months ago
- Evilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs☆452Updated 3 months ago
- An offensive data enrichment pipeline☆844Updated last week
- A visual methodology tracking platform tailored for offensive security assessments☆207Updated 3 weeks ago
- Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in…☆513Updated last year
- Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.☆314Updated last year
- Google Calendar RAT is a PoC of Command&Control over Google Calendar Events☆252Updated last month
- Script for generating revshells☆476Updated last year
- PasteBomb C2-less RAT☆318Updated 10 months ago
- Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all D…☆519Updated last year
- Redeye is a tool intended to help you manage your data during a pentest operation☆467Updated last year
- A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Inte…☆1,152Updated 2 weeks ago