suninus/chall_tools

Tools for security challenges

Chall_Tools

Userfull tools for Security Challenges

A
aslr : Switch on/off aslr (for lazy guys)

B
binpatch.py : Patch a file, allow regex matches.
/bdoor : Backdoors and reverse shells

C
cprint : Column print a file (only ascii printable)
crpytoracle: Find crypto constantes in a file

D
dcod_zeustr.py: Decode strings in Zeus
decrotePE.py: Extract PE from any data dump

E
entro.py: Give a file entropy and detect xor key len

F
f5discovery.py: Detect F5 SLB and give backend IP and port if sticked
filetyperipper.py: Detect all filetype contained in a binary
findword.py: find word for scrable

H
har2curlloader.py: Convert browser HAR file to Curl-Loader configuration
httpsvrgar.py: A on purpose very RAW httpserver. Usefull for sending garbage
httpgrap.py: Grab a screenshot of a website with firefox via selenium

M
machouillemacro.py: Add decoy macro for bypassing AV to vba

N
newpy.py: Spawn a new python script skeletton

O
ollylink.py: IDAPython script for linking API Function call to memory offset

P
peentro.py: find anomalies by name or entropy in sections of a PE file.
phpeval.py: Deobfuscate php code like eval(gzinflate(base64(backdoorcode)))

R
ripurl.py : Find and retrieve any URL found in a file even a binary one
ropval.py : Find values in ELF, usefull for rop like ADD EAX,[EBX]

T
spoof_tftp_bckp.py : Bypass ACL for backing up Cisco conf

X
xlentro.py : Xor Lenght Entropy - Show Shannon Entropy on a file, Usefull for determining XOR crypted file key lenght.
xphp.py: Xtract only php code from any file
xor.py: Multi purpose 8 Bit Key file XORer