Exploitation 240502-C

CMS Detection

Exploitation suite is tool for scanning wordpress, joomla, Drupal and more than 100 other CMS.Functions of CMSeek:

1. Basic CMS Detection of over 80 CMS

 2. Drupal version detection 

3. Advance wordpress scans

4. Detects version 

5. User enumeration 

6. Plugins enumeration 

7. Theme enumeration

8. Detects User (3 Detection method)

9. Loop for version vulnerabilities and much more!

10. Advanced Joomla Scans 

11. Version detection

12. Backup file finder

13. Core vulnerability detection

14. Directory listing check

Config leak detection ...and many more

Installation:

$ apt update && apt upgrade

$ apt install git

$ apt install git

$ apt install python2

$ apt install python

$ git clone https://github.com/Tuhinshubhra/CMSeeK

$ cd CMSeeK

$ chmod +x *

$ Run : 

$ python cmseek.py

Here select your option and Use the required option.

Zarp-Local Network Tool

This tool worls only in rooted phones. This is local network exploitation tool.

Installtion: 

$ apt update && apt upgrade

$ apt install git

$ apt install python2

$ git clone https://githum.com/hatRiot/zarp

$ cd zarp

$ chmod +x zarp.py

Run:

$ sudo python2 zarp.py

TM-Venom

Tmvenom is a python based tool specially designed for Termux users.

This payload generates some basic payloads using metasploit-framework.

so You must install metasploit framework on your Termux.

This tool works both rooted and non rooted devices.

This is very helpfull for beginners.

this tool also guide you to generate payloads easily

Requirments:-

Termux APp

metasploit-framework

Installation :

$ apt update

$ apt upgrade

$ apt install git

$ apt install python2

$ git clone https://github.com/TechnicalMujeeb/tmvenom

$ cd tmvenom

$ chmod +x *

$ sh install.sh

usage :

python2 tmvenom.py

Now select payload options and you can easily generates payloads.

MetaSploit Framework 

If you wish to install the metasploit-framework all by itself

You can use a shell script to install it.

remember dont turn off your internet connection

follow these steps :

1. uninstall termux app

2. Newly install Termux app

3. open Termux app

4. run these commands

$ apt update

$ apt upgrade

$ apt install wget

5. clone metasploit with this command

$ wget https://github.com/rapid7/metasploit-framework

$ bash metasploit.sh

This script will install the latest version of metasploit-framework.

script also include some extras to make updating metasploit faster.

If all goes well, i.e. No red colored warnings,

you can start metasploit using ./msfconsole.

Now take a coffe and sit down and wait 15-20 minutes

to install metasploit in termux

after installation type this command :

$ cd metasploit-framework

Now run msfconsole

$ ./msfconsole

Enjoy metasploit....

A-Rat Exploit

A-Rat = Remote access tool

we can generate python based rat

installation :

$ apt update

$ apt upgrade

$ apt install git

$ apt install python2

$ apt install python

$ git clone https://github.com/AhMyth/AhMyth-Android-RAT

$ cd A-Rat

$ chmod +x *

usage :

$ python2 A-Rat.py

$ help

$ set host 127.0.0.1 [your ip]

$ set port 1337

$ set output /$HOME/rat.py

$ generate

It generates rat.py in termux home directory

Open termux new session

type $ ls

here you get that rat.py

go to again A-Rat means privious session of termux

Type run to start exploit.

$ run

and then open new session and run rat like this

$ python rat.py

and come back to A-Rat session

Now its connected to that rat. means Hacked.

press control + c to stop.

Hulk [DOS Tool]

.

HULK DoS tool ported to Go with some additional features.

Installation :

$ apt update && apt upgrade

$ apt install git

$ apt install python2

$ git clone https://github.com/grafov/hulk

$ cd hulk

$ chmod +x *

usage :

$ python2 hulk.py [url]

Golden-Eye

GoldenEye

GoldenEye is an python app for SECURITY TESTING PURPOSES ONLY!

GoldenEye is a HTTP DoS Test Tool.

Attack Vector exploited: HTTP Keep Alive + NoCache

Installation :

$ apt update && apt upgrade

$ apt install git

$ apt install python2

$ git clone https://github.com/jseidl/GoldenEye

$ cd GoldenEye

$ chmod +x *

Run :

$ python2 goldeneye.py [url]

Brutal

Brutal = this is a toolkit to quickly create various payload,

powershell attack, virus attack.and launch listener

for a human interface devices..this is extreamly useful

for executing scripts on a target machin..

For use this tool you must install sudo in your termux

means it need rooted devices..

Installation :

$ apt update && apt upgrade

$ apt install git

$ git clone https://github.com/Screetsec/Brutal

$ cd Brutal

$ chmod +x *

Run :

$ sudo ./Brutal.sh

Now simply select your option which you want..