• This repository has been archived on 04/Dec/2023
  • Stars
    star
    479
  • Rank 91,752 (Top 2 %)
  • Language
    Python
  • License
    GNU General Publi...
  • Created almost 7 years ago
  • Updated over 5 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Cloak can backdoor any python script with some tricks.

Cloak

Cloak is an intelligent python backdoor framework*.

What it exactly does?

Cloak generates a python payload via msfvenom and then intelligently injects it into the python script you specify.

To evade basic detection, Cloak breaks the payload into several parts and places it in different places in the code. If you want the victim to run your injected script as root, Cloak can handle that too. Cloak will be further upgraded in future to support a wide range of payloads, platforms and evasion techniques.

Demo

Compatibility

Cloak works best on Linux and is compatible with both python2 and python3. Dependencies:

  • msfvenom

Contribute

For now, Cloak can backdoor python scripts but I am looking forward to do the same for C, bash and perl scripts. Currently, the default connection method is https and Cloak creates a staged and reverse payload. So, of course the I will try to extend its capabilities which also includes bypassing lowkey AV solutions in windows.
If you like the idea, help me achieve the goals. The code is well documented so if you want to contribute you are not going to face any problems. Modify the code, add and improve and start a pull request.
If you find a bug in the code don't hesitate to start an issue.

Email: [email protected] Twitter: @s0md3v

More Repositories

1

roop

one-click face swap
Python
27,272
star
2

XSStrike

Most advanced XSS scanner.
Python
13,111
star
3

Photon

Incredibly fast crawler designed for OSINT.
Python
10,869
star
4

Arjun

HTTP parameter discovery suite.
Python
5,093
star
5

AwesomeXSS

Awesome XSS stuff
JavaScript
4,730
star
6

sd-webui-roop

roop extension for StableDiffusion web-ui
Python
3,349
star
7

Smap

a drop-in replacement for Nmap powered by shodan.io
Go
2,860
star
8

Striker

Striker is an offensive information and vulnerability scanner.
Python
2,213
star
9

be-a-hacker

roadmap for a self-taught hacker
1,839
star
10

ReconDog

Reconnaissance Swiss Army Knife
Python
1,776
star
11

Hash-Buster

Crack hashes in seconds.
Python
1,716
star
12

huepy

Print awesomely in terminals.
Python
1,462
star
13

Corsy

CORS Misconfiguration Scanner
Python
1,335
star
14

uro

declutters url lists for crawling/pentesting
Python
1,105
star
15

Silver

Mass scan IPs for vulnerable services
Python
1,024
star
16

Decodify

Detect and decode encoded strings, recursively.
Python
864
star
17

Diggy

Extract endpoints from apk files.
Shell
862
star
18

Blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .
Python
833
star
19

Breacher

An advanced multithreaded admin panel finder written in python.
Python
717
star
20

ote

Generate Email, Register for anything, Get the OTP/Link
Python
569
star
21

goop

Google Search Scraper
Python
564
star
22

Parth

Heuristic Vulnerable Parameter Scanner
Python
559
star
23

Zen

Find emails of Github users
Python
553
star
24

Bolt

CSRF Scanner
Python
532
star
25

Orbit

Blockchain Transactions Investigation Tool
Python
524
star
26

JShell

JShell - Get a JavaScript shell with XSS.
Python
506
star
27

MyPapers

Repository for hosting my research papers
Python
498
star
28

nano

Nano is a family of PHP web shells which are code golfed for stealth.
PHP
431
star
29

sqlmate

A friend of SQLmap which will do what you always expected from SQLmap.
Python
424
star
30

SubGPT

Find subdomains with GPT, for free
Python
332
star
31

dump

Stuff that doesn't deserves its own repository.
Python
300
star
32

hardcodes

find hardcoded strings from source code
Python
273
star
33

Quark

Quark is a data visualization framework.
JavaScript
213
star
34

proxify

A python module for dumping usable proxies.
Python
152
star
35

Predator

Anti-Automation System
CSS
120
star
36

Shiva

Improved DOS exploit for wordpress websites (CVE-2018-6389)
Python
112
star
37

velocity

DNS caching for humans
Python
89
star
38

ifnude

nudity detector that works
Python
83
star
39

zetanize

HTML form parser for humans.
Python
73
star
40

rewise

Google auto-complete wrapper
Python
73
star
41

Locky

Locky generates "really" strong yet easy to remember passwords.
Python
63
star
42

Entropy

Entropy is a (prototype) WAF driven by maths.
Python
54
star
43

meta

Explains and tests HTTP response headers
Python
39
star
44

fonetic-go

golang implementation of fonetic (https://github.com/s0md3v/fonetic)
Go
37
star
45

fonetic

assess pronounciblity of text
Python
33
star
46

shades

Shell
26
star
47

wl

convert case style of words
Go
21
star
48

s0md3v.github.io

my personal blog
SCSS
15
star
49

s0md3v

11
star
50

dishtance

JavaScript
6
star
51

.github

my default .github files
5
star
52

BG3-Mutant

Mod for Baldur's Gate 3 that adds a Mutant class to the game.
2
star