• This repository has been archived on 02/Mar/2018
  • Stars
    star
    329
  • Rank 128,030 (Top 3 %)
  • Language
    Go
  • License
    MIT License
  • Created over 8 years ago
  • Updated almost 8 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

EGESPLOIT is a golang library for malware development

EGESPLOIT License Donate

EGESPLOIT is a golang library for malware development, it has few unique functions for meterpreter integration.

#DOCUMENTATION

        CalculateChecksum(x) : Function calculates x digit 8 bit checksum for reverse HTTP/HTTPS meterpreter connections, returns the calculated checksum as string.
        
        Meterpreter(ConType, Address) : Function launches a meterpreter connection, takes 2 parameters connection type (HTTP/HTTPS/TCP) and Address (127.0.0.1:4444), function returns a string for error handling.
        
        Persistence() : Function copys and adds the running binary to startup registry.
        
        Sysguide() : Function returns the current directory, running OS version, username, antivirus name as strings.
        
        Keylogger(LOGS) : Function takes a string pointer as parameter and starts a keylogger,all key logs are saved at given parameter.
        
        Please(Command) : Function executes the given parameter with runas command. (Asks permission for higher level operations)  
        
        BypassAV() : Function bypasses the anti virus heroustic detections, takes a integer as parameter for defining the intensity level.
        
        Dispatch(Base64_Binary,BinaryName, Parameters) : Function drops a binary and executes it, takes tree strings as parameter base64 encoded binary, binary name and parameters.
        
        Distract() : Functions execute a forkbomb bat file for distracting the user.
        
        Dos() : Function start a dos atack to given target (http://example.com)
        
        SyscallExecute(Shellcode) : Function executes the given shellcode(byte array) with system call.
        
        ThreadExecute(Shellcode) : Function executes the given shellcode(byte array) with CreateThread function.

        WifiList() : Functions returns he wifi connection history.
        
        #RSE#
        RSE stands for "Reduced Sized Exploits", functions under RSE folder are build with windows api calls for reducing payload sizes.

Bitcoin: 16GvMV7eZH22p4rLQuu8h2gbgSLYr11KBM

More Repositories

1

amber

Reflective PE packer.
Go
979
star
2

sgn

Shikata ga nai (仕方がない) encoder ported into go with several improvements
Go
952
star
3

HERCULES

HERCULES is a special payload generator that can bypass antivirus softwares.
Go
592
star
4

deoptimizer

Evasion by machine code de-optimization.
Rust
327
star
5

ARCANUS

ARCANUS is a customized payload generator/handler.
Go
143
star
6

Cminer

Cminer is a tool for enumerating the code caves in PE files.
C++
131
star
7

Keylogger

Simple C++ Keylogger...
C++
128
star
8

WSAAcceptBackdoor

Winsock accept() Backdoor Implant.
C
111
star
9

Mass-Hacker-Arsenal

Massive arsenal of hacker tools...
Shell
75
star
10

Hook_API

Assembly block for hooking windows API functions.
Assembly
72
star
11

IAT_API

Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.
Assembly
64
star
12

The-Eye

Simple security surveillance script for linux distributions.
Go
53
star
13

MapPE

PE file mapping and manipulation package.
Go
37
star
14

syscall_api

Assembly
36
star
15

Ticketbleed

This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.
Go
28
star
16

zippo

Zippo is a archive payload generator for testing XSS, (Zip/Tar/Gzip) slip vulnerabilities.
Go
26
star
17

SelfDefense

Several self-defense shellcodes
Assembly
22
star
18

MSF-Self-Defence

Self defense post module for metasploit
Ruby
18
star
19

meterpreter

Basic multi platform meterpreter loader module.
Go
17
star
20

MSF-Telegram-Notify

Telegram notification for metasploit sessions.
Ruby
15
star
21

BitBender

BitBender is a byte manipulation tool
Go
15
star
22

AzorultDecryptor

Brute-force script for finding azorult XOR key.
Go
15
star
23

crc32_api

Assembly API block that uses CRC32 for resolving Windows API function addresses
Assembly
14
star
24

KPOT-Decryptor

Tool for finding KPOT XOR key using known-plaintext attack.
Go
14
star
25

sub7

Clone of https://gitlab.com/illwill/sub7 repo.
Pascal
14
star
26

Injector

Simple shellcode injector.
C++
14
star
27

CryptAPI

Ransomware Using CryptoAPI
C
13
star
28

keystone-go

Keystone binding for golang
C
11
star
29

CVE-2022-29154

HIP2022 presentation materials.
10
star
30

urlscan-go

URLScan Go API client
Go
8
star
31

ARMBot_RCE

ARM Bot RCE Exploit.
Ruby
6
star
32

egebalci

6
star
33

CVE-2018-8065

Flexense HTTP Server <= 10.6.24 - Denial Of Service Exploit
Ruby
6
star
34

cracklord-docker

Experimental docker image for http://jmmcatee.github.io/cracklord/
Dockerfile
4
star
35

LG-Smart-IP-Device-Backup-Download

Exploit for downloading backup files from LG Smart IP Devices.
Python
4
star
36

Baldr_Exploit

Baldr remote code execution exploit for versions <= v3
Ruby
4
star
37

Sync_Breeze_Enterprise_10_6_24_-DOS

Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability
Ruby
2
star
38

AdvertisementBot

An advertisement bot for twitter.
JavaScript
2
star
39

conpty-go

Go
1
star
40

dotfiles

My dotfiles
1
star