OneGadget
0 (0)
Find RCE gadgets for CTF pwn challenges with ease.
Tool for exploiting Sixnet RTUs. Abstract: Supervisory Control and Data Acquisition (SCADA) networks and devices are the computational brains behind the nation’s infrastructure. They monitor and control industrial machinery in power plants, oil and gas lines, assembly lines, and etcetera. There exist programmable logic controllers and remote terminal units sitting on these SCADA networks that are critically lacking in some of the most basic security processes and controls. This paper and the corresponding project are meant to highlight such a weakness at the application level of Sixnet SCADA devices. The tool detailed in this project is written in Python and allows an attacker to gain root level access to these Sixnet devices with very little effort. The Project: There are three aspects to a basic SCADA network. The network itself is the medium through which the endpoints communicate with each other. These networks are very similar to corporate local area or wide area networks and may consist of various routing and switching components. Ideally a SCADA network is a completely isolated subnet of a greater corporate network and out of reach of the internet. Another aspe
Find RCE gadgets for CTF pwn challenges with ease.
Insights on Red Teaming for Pacific Rim CCDC 2016 competition, focusing on preparation, operations plan, and automation.
The Proxmark III is a versatile device for sniffing, reading, and cloning RFID tags with strong community support.
A tool for iOS pentesting and research with a GUI version available.
A technique for social engineering and untrusted command execution using ClickOnce technology
A Ruby framework designed to aid in the penetration testing of WordPress systems.
