Saturday, January 27, 2024

Multi-Protocol Proxy Over TCP & UDP

Many years ago I programed a console based multi protocol proxy (the sha0proxy) lately I created in dotnet a graphical verison of the tool, but due to the form referesh speed finally I implemented it in C++ with Qt.

This tool useful for reversing, exploiting & pentesting was finally called rproxy, and its a multi-protocol proxy over TCP or UDP.





Being in the middle of the communication you can view and modify the bytes before being sent to the client or server.

In the tools tab right now its possible to open the blob on radare2 for further reversing of the data structures or code.


A basic mutation based fuzzer is implemented for bug-hunting, just set the % ratio of mutation and the bytes will be modified during specific communications phase.

One of the powerful things of this tool is the scripting, it is possible to automate a modification in specific moment of the traffic flow.



For example a script with a single line: "IN 3 20 3F" will write a 0x3f on the offset 20 only on the third packet received from the server. I have used this feature for triggering vulnerabilities.

Regarding the saving and loading data from disk, it's possible to save and load data in raw and hex formats. Also can be configured for save all the communications or only specific emission.


Find the source code and binaries at github: https://github.com/sha0coder/reproxy



Related word


Posted by at No comments:

CEH: Gathering Host And Network Information | Scanning

Scanning

It is important that the information-gathering stage be as complete as possible to identify the best location and targets to scan. After the completion of  footprinting and information gathering methodologies, scanning is performed.
During scanning, the hacker has vision to get information about network an hosts which are connected to that network that can help hackers to determine which type of exploit to use in hacking a system precisely. Information such as an IP addresses, operating system, services, and installed applications.

Scanning is the methodology used to detect the system that are alive and respond on the network or not. Ethical hackers use these type of scanning to identify the IP address of target system. Scanning is also used to determine the availability of the system whether it is connected to the network or not.

Types Of Scanning 

Network Scanning Identifies IP addresses on a given network or subnet
Port Scanning Determines open, close, filtered and unfiltered ports and services
Vulnerability Scanner Detect the vulnerability on the target system

Port Scanning ​

Port scanning is the process of identifying open and available TCP/IP ports on a system. Port-scanning tools enable a hacker to learn about the services available on a given system. Each service or application on a machine is associated with a well-known port number. Port Numbers are divided into three ranges:
  • Well-Known Ports: 0-1023
  • Registered Ports: 1024-49151
  • Dynamic Ports: 49152-6553

Network Scanning

Network scanning is performed for the detection of active hosts on a network either you wanna attack them or as a network administrator. Network-scanning tools attempt to identify all the live or responding hosts on the network and their corresponding IP addresses. Hosts are identified by their individual IP addresses.

Vulnerability Scanning

This methodology is used to detect vulnerabilities of computer systems on a network. A vulnerability scanner typically identifies the operating system and version number, including applications that are installed. After that the scanner will try to detect vulnerabilities and weakness in the operating system. During the later attack phase, a hacker can exploit those weaknesses in order to gain access to the system. Moreover, the vulnerability scanner can be detected as well, because the scanner must interact over the network with target machine.

The CEH Scanning Methodology

As a CEH, you should understand the methodology about scanning presented in the figure below. Because this is the actual need of hackers to perform further attacks after the information about network and hosts which are connected to the network. It detects the vulnerabilities in the system bu which hackers can be accessible to that system by exploitation of that vulnerabilities.



Continue reading


  1. Pentest Tools For Android
  2. Pentest Tools Kali Linux
  3. Hackers Toolbox
  4. Pentest Tools Port Scanner
  5. Pentest Tools Download
  6. Pentest Reporting Tools
  7. Hack Tools For Mac
  8. Hacking Tools Pc
  9. Hacker Tools List
  10. Android Hack Tools Github
  11. Hacking Tools For Windows
  12. Kik Hack Tools
  13. Free Pentest Tools For Windows
  14. Growth Hacker Tools
  15. Game Hacking
  16. Pentest Tools List
  17. Tools Used For Hacking
  18. Hacker Tools Free
  19. Hack Tools Download
  20. Pentest Tools Url Fuzzer
  21. Pentest Tools Online
  22. Pentest Tools Tcp Port Scanner
  23. Hack Tools 2019
  24. Hacking Tools For Pc
  25. Pentest Tools Kali Linux
  26. Hacker Tools Mac
  27. Pentest Tools Tcp Port Scanner
  28. Best Hacking Tools 2020
  29. Hack Tools Download
  30. Pentest Recon Tools
  31. Tools Used For Hacking
  32. Growth Hacker Tools
  33. Hacker Techniques Tools And Incident Handling
  34. Github Hacking Tools
  35. Hack Tool Apk
  36. Pentest Tools Windows
  37. Hackers Toolbox
  38. Hack Tools Pc
  39. Termux Hacking Tools 2019
  40. Termux Hacking Tools 2019
  41. Hack Tools For Windows
  42. Hack Tools Download
  43. Bluetooth Hacking Tools Kali
  44. Hacker Tools Software
  45. Hacker Tools Apk
  46. Best Hacking Tools 2019
  47. Hack Tools For Pc
  48. Pentest Tools Kali Linux
  49. Pentest Tools For Ubuntu
  50. Hacker Tool Kit
  51. Hak5 Tools
  52. How To Hack
  53. Hacker Tools Windows
  54. Underground Hacker Sites
  55. Hacking Tools Download
  56. New Hacker Tools
  57. Hacking Apps
  58. Hacker Tools Hardware
  59. Hack Tools Mac
  60. Nsa Hack Tools Download
  61. How To Hack
  62. Growth Hacker Tools
  63. Hack Tools For Ubuntu
  64. Hacker
  65. World No 1 Hacker Software
Posted by at No comments:

Friday, January 26, 2024

New Consulting Series Financial Statement Workshop

 I added a new video to the consulting series playlist today... This is for creating and managing your personal financial statements,  your budgeting of income/expenses from various sources and how to allocate those automatically to investments to build and track over time.... 

If you learn something.. Like and leave a comment...   Cheers... 




Read more
  1. Hacking Tools Hardware
  2. Hacking Tools Usb
  3. New Hack Tools
  4. Hacking Tools For Windows 7
  5. Physical Pentest Tools
  6. Pentest Tools Bluekeep
  7. Nsa Hack Tools
  8. Hacking Tools
  9. Hacker Tools Linux
  10. Hacking Tools 2019
  11. Hacker
  12. Pentest Tools Review
  13. How To Make Hacking Tools
  14. Hack Tools For Windows
  15. Hacker Tools Github
  16. Hacking Tools Download
  17. Hacker Tools Mac
  18. Kik Hack Tools
  19. Hacker Tools For Ios
  20. Pentest Tools Alternative
  21. Hacking Tools For Beginners
  22. Hacking Tools Windows 10
  23. Pentest Reporting Tools
  24. Pentest Tools For Mac
  25. Hacking Tools For Mac
  26. Hacking Tools For Windows 7
  27. Hack Tools For Mac
  28. Pentest Tools Subdomain
  29. Hacker Tools Hardware
  30. Hacker Tool Kit
  31. Hacking Tools Github
  32. Pentest Tools Framework
  33. Hacker Tools 2019
  34. Wifi Hacker Tools For Windows
  35. Hack Tools For Windows
  36. Hacking Tools 2020
  37. Hacker Tools For Pc
  38. Pentest Tools Framework
  39. Ethical Hacker Tools
  40. Hack Tools For Ubuntu
  41. Easy Hack Tools
  42. Best Pentesting Tools 2018
  43. Physical Pentest Tools
  44. Pentest Tools Review
  45. Hacker Tools Online
  46. Hacking Tools 2020
  47. Hacking Tools For Windows Free Download
  48. Pentest Recon Tools
  49. Hacker Tools Software
  50. Hacker Tools Windows
  51. Hacks And Tools
  52. Hacker Tools List
  53. Hacker Hardware Tools
  54. Game Hacking
  55. Hacking Tools 2020
  56. Hacking Tools 2019
  57. Hacking Tools Windows 10
  58. Hack Tools Online
  59. How To Install Pentest Tools In Ubuntu
  60. Pentest Tools For Windows
  61. New Hacker Tools
  62. Hacking Tools Software
  63. Pentest Tools Url Fuzzer
  64. Pentest Tools For Android
  65. Pentest Recon Tools
  66. Hacking Tools Hardware
  67. New Hack Tools
  68. Hacker Tools Software
  69. Hacker Tools 2020
  70. Computer Hacker
  71. How To Hack
  72. Easy Hack Tools
  73. Pentest Tools For Ubuntu
  74. Pentest Tools Alternative
  75. Growth Hacker Tools
  76. Hacking Tools Pc
  77. Hacking Tools Kit
  78. Hacking Tools Windows 10
  79. Hack Rom Tools
  80. Nsa Hacker Tools
  81. Hack Tools
  82. Tools Used For Hacking
  83. Pentest Tools For Ubuntu
  84. Hacking App
  85. Pentest Tools For Windows
  86. Nsa Hacker Tools
  87. Hacking Tools Hardware
  88. Hak5 Tools
  89. Bluetooth Hacking Tools Kali
  90. Pentest Tools Website Vulnerability
  91. Pentest Tools For Mac
  92. Pentest Tools Apk
  93. Hacker Tools Mac
  94. How To Install Pentest Tools In Ubuntu
  95. How To Hack
  96. Pentest Tools Website
  97. Pentest Tools Windows
  98. Pentest Box Tools Download
  99. Pentest Tools
  100. World No 1 Hacker Software
  101. Pentest Tools Subdomain
  102. New Hacker Tools
  103. Hak5 Tools
  104. Pentest Box Tools Download
  105. Hacks And Tools
  106. New Hack Tools
  107. Pentest Tools Free
  108. Pentest Tools For Windows
  109. Hacking Tools For Beginners
  110. Hacking Tools Kit
  111. Github Hacking Tools
  112. Pentest Tools Kali Linux
  113. Nsa Hacker Tools
  114. Hack Tools For Mac
  115. Hack Tools 2019
  116. Hacker Tools Free
  117. Hack Rom Tools
  118. Physical Pentest Tools
  119. Underground Hacker Sites
  120. Hacker Tools Software
  121. Tools Used For Hacking
  122. Hacker Tools Free Download
  123. Pentest Tools Tcp Port Scanner
  124. Game Hacking
  125. Hacker Tools For Windows
  126. Hacking Tools 2020
  127. Pentest Reporting Tools
  128. Pentest Tools Website Vulnerability
  129. Blackhat Hacker Tools
  130. How To Make Hacking Tools
  131. Tools 4 Hack
  132. Hack Tools
  133. Pentest Tools For Android
  134. Hacking Tools For Windows Free Download
  135. Hacker Tools List
  136. Best Hacking Tools 2019
  137. Hackers Toolbox
  138. Hack Tools 2019
  139. Hacker Tool Kit
  140. Hack Apps
  141. Hack Tool Apk
  142. What Is Hacking Tools
  143. Hacker
  144. Hacker Tools Mac
  145. Pentest Tools Nmap
  146. Hacker Tool Kit
  147. Hacker Tools List
  148. Hack Tools For Games
  149. Hacker Tools 2020
  150. Hacker Tools Linux
  151. Physical Pentest Tools
  152. Hack Tools For Ubuntu
  153. Pentest Tools Windows
  154. Hacker Tools Windows
  155. Hacker Tools For Ios
  156. Hacker Tools Mac
  157. Hacking Tools
  158. How To Make Hacking Tools
  159. Hacking Tools For Windows Free Download
  160. Hacker Tools Software
  161. Hacker Search Tools
  162. Pentest Automation Tools
  163. Hacker Tools Windows
Posted by at No comments:

Odysseus


"Odysseus is a tool designed for testing the security of web applications. Odysseus is a proxy server, which acts as a man-in-the-middle during an HTTP session. A typical HTTP proxy will relay packets to and from a client browser and a web server. Odysseus will intercept an HTTP session's data in either direction and give the user the ability to alter the data before transmission. For example, during a normal HTTP SSL connection a typical proxy will relay the session between the server and the client and allow the two end nodes to negotiate SSL. In contrast, when in intercept mode, Odysseus will pretend to be the server and negotiate two SSL sessions, one with the client browser and another with the web server." read more...

Download: http://www.bindshell.net/tools/odysseus


Continue reading
Posted by at No comments: