Shells

What is Mimikatz? Mimikatz is an open-source application that allows users to view and save authentication credentials like Kerberos tickets. Benjamin Delpy continues to lead Mimikatz developments, so the toolset works with the current…

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and…

CrackMapExec (a.k.a CME) is a post-exploitation tool that helps automate assessing the security of large Active Directory networks. Using we can brute force credential for active directory protocols. All protocols support brute-forcing and…

OpenNetAdmin is an IPAM (IP Address Management) application that allows you to keep track of network attributes like DNS names, IP addresses, Subnets, and MAC addresses.

pfSense is a free and open source firewall and router with centralized threat control, load balancing, multi-WAN, and other functions.

HelpDeskZ is a free PHP-based program that lets you control your site's support via a web-based ticketing system.

First, Activate My image plugin by visiting http://localhost/nibbleblog/admin.php?controller=plugins&action=install&plugin=my_image Second, upload your PHP shell and ignore the warnings: Go to the following link.…

After getting Magento admin credentials, you will need to upload a shell. You can do that by uploading a Magento package containing the PHP shell. You can download the package from here: https://github.com/lavalamp-/LavaMagentoBD or…

After getting Wordpress admin credentials, you will need to upload a shell. You can do that by uploading a fake Wordpress plugin containing the PHP shell. Or you can go to the Appearance menu and then went to the Editor. On the top of the…

During penetration testing, for example, if you found a vulnerable web application and were able to get a reverse shell back to your machine. Usually, the shell that you receive is own by the user of the running service such as "www-data"…