hackerhouse-opensource/tools

Stars
108
Rank 321,259 (Top 7 %)
Language
Python
License
Other
Created over 5 years ago
Updated almost 5 years ago

hackerhouse-opensource/tools

hackerhouse-opensource

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A collection of tools created for computer security research purposes.

Tools

Utilities and tools created during computer security research activities by the team at Hacker House.

Filename	Description
android-malware-grabber.tgz	Android emulator tool to download new malware from the web
ApacheProbe.zip	tool to perform Apache userdir enumeration (ASM)
bsides-london-2017-pwn.py	bl4sty exploit for HackerHouse BSides London 2017 ISO lab
bypassavp.sh	Sign an executable with a fake Microsoft certificate to evade PSP
combipass.tar.gz	Creates combination files for password cracking from textfiles
CryptCmd.zip	SSL encrypted command shell tool for Windows
defcon18.tgz	Defcon18 badge firmware hacking tools
diceware.tgz	diceware password generation tool
DSIHello.tgz	Apple DSI protocol enumeration tool (Apple File Sharing)
elf-bintools.tgz	ELF binary analysis tools
fakemac.pl	generates a random MAC address for spoofing
fm-radio.tgz	Sony Xperia FM-radio hacking tool
FTPCracker.rar	FTP server brute-force tool (GUI)
FTPScanner.rar	FTP mass-scanner tool (GUI)
mac-teensyduino.txt	OS-X 10.6.5 teensyduino command shell injection tool
net-tools.tgz	PHP tools for common network enumeration
nsediscover-kali.py	Nmap script discovery tool (kali edition)
nsediscover.py	Nmap script discovery tool (Linux)
openown.tgz	Fake SSH exploit with real IP spoofing script
rfsniff.tgz	HackRF complex signal baseband tool (ncurses)
rogueap.tgz	LinkSys router malicious access point for phishing
rosetta.db	Rosetta Stone database in SQLite format for UNIX administrators
SalityInnoculation.zip	Sality worm innoculation tool
SCRABBLE-wordlist.tgz	Scrabble dictionary wordlist for password cracking
spybot-0.3a.zip	IRC monitoring chat bot for "NSA" type capabiltiies
tru64inject.c	mach_task hacking tool for the brave alpha explorer (tru64)
WCRYSLAP.zip	WannaCry ransomware innoculation tool

These files are available under a Attribution-NonCommercial-NoDerivatives 4.0 International license.

iscsicpl_bypassUAC

UAC bypass for x64 Windows 7 - 11

exploits

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

Marble

The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.

SignToolEx

Patching "signtool.exe" to accept expired certificates for code-signing.

Stinger

CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as Administrator.

OffensiveLua

Artillery

CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administrator.

ColorDataProxyUACBypass

Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC bypass. Win 7 & up.

WMIProcessWatcher

A CIA tradecraft technique to asynchronously detect when a process is created using WMI.

cve-2018-10933

cve-2018-10933 libssh authentication bypass

backdoors

Tools for maintaining access to systems and proof-of-concept demonstrations.

CompMgmtLauncher_DLL_UACBypass

CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

MsSettingsDelegateExecute

Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key.

pyongyang_2407

Pyongyang 2407 - Android ROM from North Korea, modified to run on WBW5511_MAINBOARD_P2 devices. Releases contains an archived ROM with all needed tools to boot DPRK Android on compatible hardware. This repository contains installation instructions, hardware documentation and exploits for disabling censorship tools of North Korea Android.

envschtasksuacbypass

Bypass UAC elevation on Windows 8 (build 9600) & above.

documents

Papers, presentations and documents from the team at Hacker House.

shellcode

shellcode are codes designed to be injected into the memory space of another process during exploitation.

electionhacking

Diebold Accuvote-TSx Election Machine Hacking

NoFaxGiven

Code Execution & Persistence in NETWORK SERVICE FAX Service

Gigabyte_ElevatePersist

Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming and performance PC's. A UAC elevation vulnerability exists that can be used for persistence in a novel fashion.

AESCrypt

AES-256 Microsoft Cryptography API Example Use.

rebirth

rebirth IOS11 - 11.3.1 jailbreak security research utility

cve-2021-34527

CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation

hackerhouse-opensource

hfioquake3_DoS

ioquake3 engine is vulnerable to a remotely exploitable off-by-one overflow due to a miscalculated array index within the privileged admin console command banaddr. Attacker needs the rcon password to exploit this vulnerability.