VPN SCANNER

SMTP SCANNER

Download

Screenshot

v 1.1

Download

Screenshot

v 2

This tool conducts a simple information gathering (find administrative logins, find multiple logins, read schema files, find access to extra modules etc.) and vulnerability testing (common juniper vulnerabilities according to CVE)on Juniper SSL VPN devices. 

This tool identifies various vulnerabilities on a remote mails server (testing the remote SMTP deamon as well as external DB's). Tests include mail spoofing, attachment filtering, user verifications, black list queries, SPF queries, Open relay etc.) . Included in this tool is a whole set of malicious attachements (docs, pdf, xls etc.) that contain harmless exploits that can act as a proof of concept.

WWW PENTEST TOOLKIT

WWW FILE SCANNER

Download

Screenshot

v 3.1

Download

Screenshot

v 2

This Tool initially acts as a crawler that will spider all web pages and analyse them. You have the ability to extract predifined informations (external links, external hosts, mail adresses, comments, files etc.) or custom queries from all pages within a domain or even multiple subdomains. Additionally this tool has a strong vulnerability testing engine which will discover XSS and SQL Injection flaws.  
 

This tool will identify files on a remote web server based on the web server answer which you can define yourself (default: 200 OK). We provide a few custom check lists for various application servers and CMS (Typo3, Joomla, Symfony, Sharepoint etc.) as well as some known checks from other tools (Nikto, LotusScan etc.).
 

WEB USER ENUMERATE

TROJAN WORD EXE MACRO BUILDER
 

Download

Screenshot

v 1

Download

Screenshot

v 3

The web user enumerator helps you identify possible users on a remote webserver. This tool comes along with a big list of possible user names. Based on an error message in the body of the web server answer you can determine if the user exists or not.
 

Todays mail filter will block most exe files trying to enter the companies perimeter. With this tool you can merge any exe into a word file. The tool will convert the exe (up to 15 Mbyte) into a base64 string. This string gets written into a macro. Upon opening the word converts it back to a binary file. The file then automatically gets written on the desktop and executed.
 

INISDE OUT MACRO TROJAN

FILE JOINER (TROJAN TOOLKIT)
 

Download

Screenshot

v 1

Download

Screenshot

v 3

With Inside Out Macro tool, you can create a word file that will read out latest recent docs from the PC. After it gets opened it will convert all files in a base64 string. Then it transfers them via HTTP using the IE in hidden mode through any proxy or FW to a web server.
 

The File Joiner will help you to bind multiple binary files (jpg, pdf, doc, mpeg etc.) into one executable. When the exe is started all files get executed at the same time. this will help you build a custom trojan and hide your malicious exe. You can bind any type of files together with an exe and add custom assembly informations. The new exe will additionaly be encrypted to protect from antivirus.
 

EXE-APPLET TROJAN INFILTRATOR
 

INSIDE OUT TROJAN TOOL
 

Download

Screenshot

v 1

Download

Screenshot

v 1

This Archive will contain an applet which will load within a html file. When the html file gets opened it will download and execute an exe which the user placed within the same DIR. The applet can be configured with a simple xml file that enables the user to embedd an exe of his choice. To break out of the sandbox a custom certificate has to be accepted by the user.
 

This tool will simulate an encryption. The user has to enter a passphrase. A word document will be created on the desktop after decryption. In the background files from the user are send out to a webserver using an inside out tunneling attack via http.
 

DNS TUNNEL TROJAN
 

PASSWORD GENERATOR
 

Download

Screenshot

v 1

Download

Screenshot

v 1

This tool is an interactive trojan (on the client side it simulates an encrypted zip)that uses DNS (UDP) to communicate to a server behind the company firewall. The operator can run multiple instances of this trojans behind various company networks and deliver new commands via DNS (the client will poll the command himself via A-Record queries to a malicious DNS server that runs an interactive web service to administrate the trojans).
 

This tool will help create custom password lists by using techniques like replacement operations (replace 1 with L or 0 with O etc.) or number additions (append or prepend numbers and special characters).  Included in the tool are a big number of ready to use password lists which can be altered.
 

INSIDE OUT TROJAN KEYLOGGER
 

TEAM VIEWER TROJAN
 

Download

Screenshot

v 1

Download

Screenshot

v 1

This advanced keylogger has some unique abilities:

a) runs with standard user rights

b) sends all logs via hidden HTTP posts to an external web server

c) is undetected by all known AV by avoiding standard keylogger techniques

d) has the ability to also capture on screen keypads used within secured logins
 

Ever tought of administering a PC in TeamViewer Style - but without user notification? This is the tool which will use a custom infrastructure that enables remote administration of a PC behind any firewall. Of course it won't be detected by any AV or reverse proxy filter.