A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant
☆225Apr 17, 2017Updated 9 years ago
Alternatives and similar repositories for doublepulsar-c2-traffic-decryptor
Users that are interested in doublepulsar-c2-traffic-decryptor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.☆1,031Feb 3, 2020Updated 6 years ago
- EternalRocks worm☆468May 25, 2017Updated 9 years ago
- A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use…☆124Jun 27, 2017Updated 9 years ago
- Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective wa…☆726Nov 19, 2017Updated 8 years ago
- A RAT (Remote Administration Tool) using port-knocking techniques for *NIX systems I wrote in 2006 but still works in 2017. libpcap-based…☆49May 3, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of scripts to initialize a windows VM to run all the malwares!☆106Apr 3, 2020Updated 6 years ago
- Running CVE-2017-8759 exploit sample.☆256Jan 23, 2020Updated 6 years ago
- Pocs for Antivirus Software‘s Kernel Vulnerabilities☆264Jul 6, 2017Updated 9 years ago
- Pcaps for PeddleCheap and implant communication + script for interpreting and decrypting pcaps.☆17Nov 29, 2017Updated 8 years ago
- PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)☆270Feb 28, 2018Updated 8 years ago
- Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow☆92Apr 20, 2017Updated 9 years ago
- sonoff evil firmware PoC - used for demonstration during live demo on exploitation by MQTT☆16Jul 3, 2017Updated 9 years ago
- Analyse SQL injection attempts in web server logs☆83Jan 11, 2017Updated 9 years ago
- Script to generate malicious debian packages (debain trojans).☆125Apr 24, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Docker container with tools for binary reverse engineering and exploitation.☆329May 4, 2021Updated 5 years ago
- Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg☆2,006Apr 14, 2017Updated 9 years ago
- Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying☆308Jan 12, 2023Updated 3 years ago
- ADB utilities to do a bunch of stuff.☆14Oct 30, 2014Updated 12 years ago
- Brute forcer and shell deployer for WildFly☆97Mar 10, 2018Updated 8 years ago
- ☆14Feb 7, 2018Updated 8 years ago
- CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.☆176Sep 14, 2017Updated 9 years ago
- A collection of useful radare2 scripts!☆32Feb 2, 2018Updated 8 years ago
- Detect silent (unwanted) changes to files on your system☆162May 4, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- BTG's purpose is to make fast and efficient search on IOC☆70Nov 27, 2018Updated 7 years ago
- InjectProc - Process Injection Techniques [This project is not maintained anymore]☆993Feb 10, 2019Updated 7 years ago
- This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office…☆98Nov 21, 2017Updated 8 years ago
- WhiteBox CMS analysis☆68May 22, 2023Updated 3 years ago
- Various PoCs☆502Jan 27, 2020Updated 6 years ago
- Malware exploits☆572Aug 22, 2025Updated last year
- Fancy Bear Source Code☆263Jan 9, 2017Updated 9 years ago
- An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit☆81Mar 9, 2017Updated 9 years ago
- CVE-2017-7269 to webshell or shellcode loader☆88May 16, 2017Updated 9 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer…☆445Jul 11, 2017Updated 9 years ago
- Python script to decode common encoded PowerShell scripts☆215Jun 13, 2018Updated 8 years ago
- A proxy for allowing a public IP address to host a service actually provided by a hidden backend.☆15Jul 12, 2016Updated 10 years ago
- 16,432 Free Yara rules created by☆389Jun 1, 2019Updated 7 years ago
- A TCP proxy over named pipes. Originally created for maintaining a meterpreter session over 445 for less network alarms.☆243Sep 13, 2021Updated 5 years ago
- DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.☆153Oct 20, 2018Updated 8 years ago
- A REST API server for yara event notifications. Mapping file hashes to yara signatures in Elasticsearch for easy hash lookup or finding h…☆19May 12, 2015Updated 11 years ago