top of page

Changes is the only thing which never change
IT news & Information Technology Comparison


Hydra
Nice tool for logon brute force attacks. Can bf a number of services including SSH, FTP, TELNET, HTTP etc. Install: sudo apt install...


Social Engineer Toolkit (SET)
The Social Engineer Toolkit (SET) is an open-source framework designed to facilitate social engineering attacks, primarily utilized in...


EvilGoPhish
evilginx2 + gophish. (GoPhish) Gophish is a powerful, open-source phishing framework that makes it easy to test your organization's...


Bash Bunny
Hak5 created the Bash Bunny, a very flexible USB attack platform mostly used for red teaming and penetration testing. It is a powerful...
Initial Access tools
EvilGoPhish (Phishing campaign framework) Bash Bunny (USB attack tool) The Social-Engineer Toolkit (Phishing campaign framework) Hydra...
VBA
Creating payload: Sub calc () Dim payload As String payload = "calc.exe" CreateObject ( "Wscript.Shell" ). Run payload, 0...
HTA
Creating payload: < html > < body > < script > var c = 'cmd.exe' new ActiveXObject ( 'WScript.Shell' ). Run (c); </ script > </...
WSH
Creating payload: Set shell = WScript.CreateObject( "Wscript.Shell" ) shell.Run( "C:\Windows\System32\calc.exe " & ...


OffensiveVBA
A collection of offensive techniques, scripts and useful links for achieving code execution and defense evasion via office macros. Usage:...


Kernel Callback Functions
This technical note provides a comprehensive list all the APIs exported by the Windows Kernel, for driver writes to register callback...


NTAPI Undocumented Functions
This site provides information on undocumented Windows internals, system calls, data structures, and other low-level details of the...


WordSteal
This script will create a Microsoft Word Document with a remote image, allowing for the capture of NTML hashes from a remote victim...


Freeze
Freeze is a payload creation tool used for circumventing EDR security controls to execute shellcode in a stealthy manner. Freeze utilizes...


Shellter
Shellter is a dynamic shellcode injection tool, and the first truly dynamic PE infector ever created. It can be used in order to inject...


Msfvenom
Msfvenom allows the creation of payloads for various operating systems in a wide range of formats. It also supports obfuscation of...
bottom of page