Userfull tools for Security Challenges
A
aslr : Switch on/off aslr (for lazy guys)
B
binpatch.py : Patch a file, allow regex matches.
/bdoor : Backdoors and reverse shells
C
cprint : Column print a file (only ascii printable)
crpytoracle: Find crypto constantes in a file
cyril_string: Regex for Finding cyrilc strings
D
dcod_zeustr.py: Decode strings in Zeus
decrotePE.py: Extract PE from any data dump
E
entro.py: Give a file entropy and detect xor key len
F
f5discovery.py: Detect F5 SLB and give backend IP and port if sticked
filetyperipper.py: Detect all filetype contained in a binary
findword.py: find word for scrable
findas.sh: give an AS and return ranges
H
har2curlloader.py: Convert browser HAR file to Curl-Loader configuration
httpsvrgar.py: A on purpose very RAW httpserver. Usefull for sending garbage
httpgrap.py: Grab a screenshot of a website with firefox via selenium
M
machouillemacro.py: Add decoy macro for bypassing AV to vba
N
newpy.py: Spawn a new python script skeletton
ntfs_attr.sh: Show ntfs file attribute on linux
O
ollylink.py: IDAPython script for linking API Function call to memory offset
P
parse_msf.py: Parse Metasploit history file to give actions, compromised hosts
peentro.py: find anomalies by name or entropy in sections of a PE file.
phpeval.py: Deobfuscate php code like eval(gzinflate(base64(backdoorcode))
prettyvba.py: Pretty indentation with colorization and detection of "bad" things in VB scripts
R
ripurl.py : Find and retrieve any URL found in a file even a binary one
ropval.py : Find values in ELF, usefull for rop like ADD EAX,[EBX]
S
strxor.py: Uncipher a file against a xor key
T
spoof_tftp_bckp.py : Bypass ACL for backing up Cisco conf
X
xlentro.py : Xor Lenght Entropy - Show Shannon Entropy on a file, Usefull for determining XOR crypted file key lenght.
xphp.py: Xtract only php code from any file
xor.py: Multi purpose 8 Bit Key file XORer