th4nat0s/chall_tools

Tools for security challenges

Chall_Tools

Userfull tools for Security Challenges

A
aslr : Switch on/off aslr (for lazy guys)

B
binpatch.py : Patch a file, allow regex matches.
/bdoor : Backdoors and reverse shells

C
cprint : Column print a file (only ascii printable)
crpytoracle: Find crypto constantes in a file
cyril_string: Regex for Finding cyrilc strings

D
dcod_zeustr.py: Decode strings in Zeus
decrotePE.py: Extract PE from any data dump

E
entro.py: Give a file entropy and detect xor key len

F
f5discovery.py: Detect F5 SLB and give backend IP and port if sticked
filetyperipper.py: Detect all filetype contained in a binary
findword.py: find word for scrable
findas.sh: give an AS and return ranges

H
har2curlloader.py: Convert browser HAR file to Curl-Loader configuration
httpsvrgar.py: A on purpose very RAW httpserver. Usefull for sending garbage
httpgrap.py: Grab a screenshot of a website with firefox via selenium

M
machouillemacro.py: Add decoy macro for bypassing AV to vba

N
newpy.py: Spawn a new python script skeletton
ntfs_attr.sh: Show ntfs file attribute on linux

O
ollylink.py: IDAPython script for linking API Function call to memory offset

P
parse_msf.py: Parse Metasploit history file to give actions, compromised hosts peentro.py: find anomalies by name or entropy in sections of a PE file.
phpeval.py: Deobfuscate php code like eval(gzinflate(base64(backdoorcode)) prettyvba.py: Pretty indentation with colorization and detection of "bad" things in VB scripts

R
ripurl.py : Find and retrieve any URL found in a file even a binary one
ropval.py : Find values in ELF, usefull for rop like ADD EAX,[EBX]

S
strxor.py: Uncipher a file against a xor key

T
spoof_tftp_bckp.py : Bypass ACL for backing up Cisco conf

X
xlentro.py : Xor Lenght Entropy - Show Shannon Entropy on a file, Usefull for determining XOR crypted file key lenght.
xphp.py: Xtract only php code from any file
xor.py: Multi purpose 8 Bit Key file XORer

chall_tools's Issues

truc a ajouter dans prettyvba

document.close
private function n'as pas de tab
selection.copy

Password for `cmdnopol.zip`?

user@host:/tmp/Chall_Tools/bdoor$ 7z x cmdnopol.zip 

7-Zip [64] 9.20  Copyright (c) 1999-2010 Igor Pavlov  2010-11-18
p7zip Version 9.20 (locale=en_US.UTF-8,Utf16=on,HugeFiles=on,4 CPUs)

Processing archive: cmdnopol.zip

Extracting  cmd32n.exe
Enter password (will not be echoed) :
     Data Error in encrypted file. Wrong password?
Extracting  cmd64n.exe     Data Error in encrypted file. Wrong password?
Extracting  reg32n.exe     Data Error in encrypted file. Wrong password?
Extracting  reg64n.exe     Data Error in encrypted file. Wrong password?
Extracting  regedit32n.exe     Data Error in encrypted file. Wrong password?
Extracting  regedit64n.exe     Data Error in encrypted file. Wrong password?

Sub items Errors: 6

user@host:/tmp/Chall_Tools/bdoor$ 

improvment log4juicy

Hello,

The script is lowering all the strings... Problematic when you have base64.

Seb