Description

Originally designed as a word list creation tool, thad0ctor's BT5 Toolkit has become an all purpose security script to help simplify many Backtrack 5 functions to help Pentesters strengthen their systems.

The backbone of thad0ctor's Backtrack 5 Toolkit is the Wordlist Toolkit that contains a plethora of tools to create, modify, and manipulate word lists in order for end users to strengthen their systems by testing their passwords against a variety of tools designed to expose their pass phrases. In short it is the ultimate tool for those looking to make a wide variety of word lists for dictionary based and other brute force attacks.

The toolkit is designed with usability in mind for the Backtrack 5R2 linux distro but will also work on BT5 R1 and other Ubuntu based distros if configured properly. The script is constantly updated with multiple revisions to include new cutting edge features and improvements in order to provide full spectrum wordlist creation capabilities.

[Download]

READ MORE

Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones.

Weevely is currently included in Backtrack and Backbox and all the major Linux distributions oriented for penetration testing.

Start with a quick Tutorial, read about Modules and Generators.
More than 30 modules to automate administration and post exploitation tasks
Execute commands and browse remote filesystem, even with PHP security restriction
Audit common server misconfigurations
Run SQL console pivoting on target machine
Proxy your HTTP traffic through target
Mount target filesystem to local mount point
Simple file transfer from and to target
Spawn reverse and direct TCP shells
Bruteforce SQL accounts through target system
Run port scans from target machine
And so on..
Backdoor communications are hidden in HTTP Cookies
Communications are obfuscated to bypass NIDS signature detection
Backdoor polymorphic PHP code is obfuscated to avoid HIDS AV detection

[Download]

READ MORE

[Download]

READ MORE

Metasploit Penetration Testing Cookbook, Second Edition
English | 320 pages | ISBN-10: 1782166785 | PDF | 6.88 MB

Metasploit software helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments. Capabilities include smart exploitation, password auditing, web application scanning, and social engineering. Teams can collaborate in Metasploit and present their findings in consolidated reports. The goal of the software is to provide a clear understanding of the critical vulnerabilities in any environment and to manage those risks.

Metasploit Penetration Testing Cookbook, Second Edition contains chapters that are logically arranged with an increasing level of complexity and thoroughly covers some aspects of Metasploit, ranging from pre-exploitation to the post-exploitation phase. This book is an update from version 4.0 to version 4.5. It covers the detailed penetration testing techniques for different specializations like wireless networks, VOIP systems, and the cloud.

Metasploit Penetration Testing Cookbook, Second Edition covers a number of topics which were not part of the first edition. You will learn how to penetrate an operating system (ShiChuang 8 penetration testing) to the penetration of a wireless network, VoIP network, and then to cloud.

The book starts with the basics, such as gathering information about your target, and then develops to cover advanced topics like building your own framework scripts and modules. The book goes deep into operating-systems-based penetration testing techniques and moves ahead with client-based exploitation methodologies. In the post-exploitation phase, it covers meterpreter, antivirus bypass, ruby wonders, exploit building, porting exploits to the framework, and penetration testing, while dealing with VOIP, wireless networks, and cloud computing.

This book will help readers to think from a hacker's perspective to dig out the flaws in target networks and also to leverage the powers of Metasploit to compromise them. It will take your penetration skills to the next level.

[Download] [Mirror]

READ MORE

Include:
Shells
Sql Injection Tools
Local Root Exploits
Symlinks\Bypass
Vulnerabily Scanners
Script/Windows Tools
Trojans
Windows Scanners
Encryptation
Crypters
Tutoriais
Sistemas

[Download]
Virustotal:  https://www.virustotal.com/en/file/7647302da5e5064bac9e337d2dbdf5d4ec54b974859f3e283e220aaaa078f0ae/analysis/

READ MORE

Tool Name :- IP-Digger v4.0 The WeB Xploit3r The Next Level
Coded by :- Manoj Nath aka Silent Hacker and Gurender Singh aka Un_NoN
Features of IP - Digger
All features of V1 , 2 , 3 + Additional features :)
New Features Added :)

17 - FTP Brute Force                       [+] New Feature Added
18 - Admin Panel Finder                    [+] New Feature Added

 Website Vulnerability Scanning To0ls
--------------------------------------------
19 - Joomla Vulnerability Scanner          [+] New Feature Added
20 - Wordpress Vulnerability Scanner       [+] New Feature Added
21 - UniScan -> Web Vulnerability Scanner  [+] New Feature Added
--------------------------------------------
22 - Uploaded Shell Finder ( Website )     [+] New Feature Added
--------------------------------------------

 Web-Backd0or ( Weevely )
--------------------------------------------
23 - Web Backd0or Generator ( Weevely )
24 - Web Backd0or Server Connect0r ( Weevely )

 Other Hacking To0lKit
--------------------------------------------
25 - W3bSploit T0olkit by 0x0ptim0us

[Download] 

READ MORE

BreakTheSecurity is proud to release the Hash Code Cracker Version 1.2. Our latest release supports Online Cracking function.
Description:
This password cracker is developed for PenTesters and Ethical hackers. Please Use this software for legal purposes(Testing the Password Strength).
Features:
This software will crack the MD5, SHA1,NTLM(Windows Password) hash codes. No need to install. Supports All platforms(windows XP/7,Linux,..).
V1.2 Changelog :
Included Online cracking Support
Minimum Requirements:
Java Runtime Environment: JRE 1.6 should be installed.(you can get it from oracle.com)
How to Run the Application?

    Download the .zip file and extract.
    Extract the zip file.
    Open the Terminal or command prompt.
    Navigate to the path of Extracted zip file (i mean HashCodeCracker
    Folder) in Terminal/CMD.
    Type this command "java -jar HashCodeCracker.jar".
    Now the application will run.

[Download] [Mirror]


Project HomePage:
http://projects.breakthesecurity.com/

READ MORE

A Complete Suite Of Web Security Tools

The Suite provides a complete and functional marketplace of highly integrated web application security tools. You will find that different areas are covered by various domain-specific solutions. The Suite consists of automated scanners, fuzzers, utilities and many other tools useful in numerous situations.

Consistent And Easy To Use

The look and feel is consistent across all applications, which makes them incredibly easy to work with. You no longer have to look for hidden options, remember commands or even change the way you go about doing your work. It all just makes sense.

Wide Coverage Of Security Vulnerabilities

The Suite scanning technology is able to discover variety of issues from XSS, SQL Injection, Local File Includes to Default Logins, Session Problems and many others. OWASP TOP 10, WASC and variety of other lists are well supported. For the complete list of vulnerabilities we can discover just click here.

[Download Websecurify]

READ MORE

Basics of Pen Test: A Lesson for Beginners
Pentester Career: How to Begin?
Professional Penetration Testing: How to Get Started?
Penetration Testing with Nessus
BackTrack for Pentesting?
Network Scanning: The Basic Tools
Blind Command Line Injection
CSRF Testing and its Protection Using RequestRodeo
Python for Coders and Pentesters
Pentesting a Nation – Is Australia Safe From Attack?
Interview with Rod Soto


Download: 

READ MORE

Features:
- Simple and friendly GUI.
- Open installers into the application with only drag and drop executables from Windows Explorer.
- Explore the internal content (files and more) of the installer.
- Extract the embedded files and script to a local folder, to a zip package or to a self-extracting module (portable).
- Decompiles the "CompiledCode.bin" file of the Installer to get the assembly code, corresponding to the "Code" script section (for advanced users only).
- Open internal files of the installer into the same application.
- Perform file searches by keyword.
- Input panel, that allows you to enter a valid password to extract encrypted installers.
- Properties panel to see advanced information about the installer.
- History for recently opened installer.
- Other miscellaneous options.
- Support older and latest versions of Inno Setup.
- Support older and latest versions of InnoUnp.
- Full Unicode support.
- Application available in multiple languages.
- Much more!

Download: Mediafire Solidfiles

READ MORE