Ethical-Hacking-Scripts - More Advanced and Powerful Scripts made for pen-te

项目说明

Ethical-Hacking-Scripts

More Ad and Powerful Scripts made for pen-testing de by me.
I might add de to my scripts if I get bored.

Please Don't Black Hat.

Do not use these scripts for malicious intent. I will not be responsible for any damages.

Only use these scripts if you ha from the people whom you are attacking, and only for ethical purposes.

What's in this Repository?

The Scripts in this repository include:
* HTTP-Flood DoS Scripts - Scripts that are aimed at taking down web servers.
* ARP-Poisoning Scripts - Sending Poisonous Packets to the router for a Man-In-The-Middle-Attack on an IP on your network.
* Packet-Sniffers - Get your network traffic(Use Linux for better experience).
* XSS-Payload Scripts - Perform Cross site scripting when you are able to obtain working payloads on a Web Server.
* Malware - Malware that can destroy files on the computer, and can also make it unbootable.
* BotNets - Botnets that can control and perform unauthorized actions to remote computers.
* Keyloggers - Log the keystrokes of another person, to possibly extract their password from the keylog.
* Hash Crackers - Brute force a Hash of a password with these scripts.
* IP Utilities - Can get information about a specified IP address or host for future attacks.
* Scanners - Scan For online IP Addresses, open ports, and scan for MAC Addreses on a home network.
* Ser - Weak servers that allow you to 'legally' test out Cross site scripting and SQL Injections(if you ha's permission).
* Phishing Scripts - Scripts designed to pose as another site's login page, to extract login information from another user.

There is more to be added.

Warnings

SquidWare and RansomSquid are very dangerous scripts. RansomSquid will encrypt all of your files, and will only decrypt them if you have the correct key. SquidWare is very dangerous as well, it deletes all of your files as well as ruining your Operating system(makes it unbootable). ONLY RUN THESE IF YOU ARE ON A MACHINE OR HA FROM ANOTHER USER! Unauthorized usage of these scripts on other people is also Illegal.

Updates

I might consider making more optimised of the scripts, perhaps with more functionality.

Brief O of My Scripts(to show that these are actually mine and are not borrowed/copied from other people):

* SquidNet - Read my SquidNet repository(there is a lot of description there). Repo for your info:
* SquidNet2 - The impro of SquidNet, removing many of the useless features it had, and added some more neccesary protocols. There will a repository soon, however my workload at school will determine whenever that will happen - Repo for your info:
* SquidNetSSH - An SSH botnet made for taking control of bots in which they have port 22(SSH Protocol) open for connections. If the Bot-Master has a user and password of one of a device, they could potentially log in with those credentials where they could be able to control the device via SSH. There is also an SSH worm inside of the script, made for if someone wanted to spread the botnet automatically. However the brute forcing on this botnet is very slow, so using an external tool such as Hydra would be useful for that.
* SquidWorm - This worm first generates the payload for which it is used to infect other machines. This is so that it could configure the password file for brute forcing as well as the config for better way of SFTP when a bot has been successfully infected(Different OS's with their different directories can mess things up). It first starts out doing a host scan to get a list of all of the IP addresses in that network. It does so by doing 'arp -a' in terminal and using the information from that to build the IP list(may modify and add the ping scan instead later). I didn't really mention the way the config file worked, so what it does is you need to have the IP, operating system, as well as the username of that IP in a line(for ex. '192.168.0.230 larry windows'). Anyways, after successfully brute forcing and infecting one of the , it needs to clone itself in order to spread even more. The worm copies and sends the password list file, config file, as well as the script itself. Once sending it to the , it executes the files remotely and the process starts over. To prevent a from being infected multiple times, a server is binded at 0.0.0.0:42069(yes, the port is that). Before the brute forcing, the worm sends a request to that server, and if it gets the correct reply, it will not brute force that . If it does not send a reply it will brute force.
* HashSquid - HashSquid is a script that was made for hash cracking. You specify the hash to crack as well as the hashing algorithim(md5, sha1, sha225, sha256, sha512, and a few others) and also the password file that has the passwords. The password file would be used to dictionary attack the hash and e crack it(if the de-hashed hash is actually in the password list). How it works is that the password file is read top to bottom, where every word would be hashed and compared to the hash that needs to be cracked. If it does find a match then the hash has been cracked.
* SquidIPUtils - A simple IP tool script that allows you to simply resolve a hostname into an IP address, or attempting to reverse DNS an IP into a hostname, as well as using the module 'geocoder' to obtain geolocation info of the specified IP Address. It's o a very simple and easy tool to use.
* SquidLogger - This script first makes you generate a payload for to run later. You specify an IP and port to host the server on(the will connect to this server and keystrokes will be logged). You can specify an external IP and port if you choose to do so as well. When run the payload, it first sends their IP address to the server(so you can differenciate between clients), and then their keystrokes will be sent to the server. The payload(when generated), will ha needed to communicate with the Keylog server. It has the IP and Port to connect to, the code to log their keystrokes, as well as the code to obtain their IP address.
* SquidPhisher - SquidPhisher is a phishing ser to pose as a certain website, however not actually being the same website and having a different function. This function is to obtain the client's username and password. The Phishing server is a web server that obtains the inputs of the clients. How it obtains said inputs is examining the header of the client, where it checks to see if names 'username' and 'password' are in it. If so, it will display that it got the user info of the client. It not only obtains their userinfo, it also obtains their IP address, by looking at the HTTP Header sent by the client, as well as obtaining the User-Agent(get a little info on what the client is using at the moment), and also their geolocation info.
* SquidXSS - This Script requires a text file with XSS Cross site scripting payloads. You also need to provide a website to test the payloads on, to see if the server is said payloads. You also need to provide the query tag, so that the server can see that you are 'inputting' something into it. Once done so, the script will send bot requests to the server, where the payloads will be sent in the query tag. In order to see if it works, the Bot requests will also be read to see if the html page recieved by the ser that payload. If it does so, it is to Cross site scripting. Otherwise, it is not.
* SquidMap - SquidMap is a scanner, aimed at finding open ports in systems or obtaining MAC Addresses if you're on a home network. You need to specify an IP address, along with the amount of ports you want to scan. The default is 1024, in case you need to know. For the port scanning, it tries to connect to that IP Address and the ports(goes in a for loop), where if it successfully connects, it has identified an open port. For the MAC Address obtaining, it sends ARP(Address Resoultion Protocol) Packets to the router to identify the MAC Address of that IP Address(if it's on the local network). You also have an option to scan the whole network. Simply put '/24' at the end of the IP Address and the script will scan through the whole range of IP Addresses. I believe this only works for windows, since the ping scan utilises the OS Command 'ping'. I made it so that it pings the IP Address once, whereas in other OS's it will constantly ping that IP address nonstop(may add a fix later).
* SquidWare - This is a Trojan Script designed to delete files and also make the computer unbootable. It first asks for Administrati, so that it has permission to delete system files(makes the computer unbootable). If these permissions are granted, then the Virus does its things. It first obtains all of the directories and files of the computer, where it then tries to delete e. It of course won't be able to delete e, as it does not ha to delete e. It can delete user files and some system files, which would delete personal files, as well as files needed to make Windows boot. After deleting the files, it waits a few seconds and the computer is shut down. Afterwards, the computer is bricked and it has no personal files.
* RansomSquid - A script that encrypts personal files. It first obtains all of the directories and files inside of the C:/Users directory, where it will try to encrypt every file that it can encrypt. It has an encryption key to encrypt the files. After every file in encrypted, the is prompted to enter the encryption key to decrypt all of the files. If the closes the python window, their files are truly lost. The attacker would ha on the , where they would be able to make the pay Ransom to obtain the Encryption key to decrypt the files(If you really are that bad of a person).
* SquidDDoS - This is an HTTP Flood script made to take down weak web servers. It has a large list of User-Agents made for generating many different HTTP Headers to send to the server. It has an option to download Proxies from the internet to cover your tracks during an Attack. It also randomly generates query strings and many other things that are needed to generate an HTTP Header. There could be thousands, maybe millions of possible HTTP Headers that could be send to the web server and confuse it. These requests are sent to the server in large masses, but it is more ideal to use this with a lot of devices and attack the web server(You can use SquidNet).
* SquidPoisoner - An ARP Poisoner designed to obtain internet traffic from another device. It first needs to obtain the MAC Addresses of the target and the router, by sending ARP Packets and then obtaining the MAC Addresses of the devices. After doing so, it sends poisonous ARP Packets to these IP addresses where it would confuse them and send their traffic to the Attacker, where the Attacker would basically be the 'Man In The Middle'(This is a type of Man-In-The-Middle Attack). The Attacker can see the targets internet traffic and see what they are connecting to(Check if they are going on any 'weird' or 'questionable' websites).
* SquidSniffer - This is more likely to work with Linux. It makes a Raw Socket where it could intercept the Raw packets(which is internet traffic) and turn them into readable or interpreble strings. It obtains the Ethernet header, in which it displays the Source and Destination MAC Addresses, as well as being able to get IP Headers, TCP Headers, and also UDP Headers that could also be decoded into. There is an option to decode the Hex Dump Binary into strings, where the Hex Dump Strings get con into strings. Most traffic is encrypted nowadays, so you're more likely to see gibberish.
* WireSquid - You need to ha Installed to use this. It uses the module PyShark, where it uses the code from WireShark to intercept internet traffic. WireSquid gets the source IP's and destination IP addresses as well as the source and destination ports of the traffic. It also obtains the Ethernet headers to obtain source and destination MAC Addresses, as well as also identifying the Protocol of these packets. There is an option to also specify filters, but it is very rough on the edges.

Other Info

Do not copy these scripts and say they are yours. I am not ok with that. If you plan to modify these scripts, please credit me as I would appreciate that.

Another thing is that My ser were intended to be horrible and very weak against attacks(so please don't bully me about the of these web servers).

A quick note that SquidNet2 is my most powerful script(It does not reflect on my socket programming skills, as DatCord does). Both of SquidNet are linked below, as they ha own repositories. SquidNet2 is the superior of SquidNet, and should be used rather than SquidNet.

SquidNet Repository:

SquidNet2 Repository:

Happy (Ethical for legal purposes)Hacking, DrSquid

项目信息

开发语言：Python

Star 数：67

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕More Advanced and Powerful Scripts made for pen-testing. Here there are Vulnerability Scanners, ARP-Poisoners, Botnets, Phishing Scripts, DDoS scripts, Keylogging Scripts and Worms. These were made for educational purposes only and should not be used in a real attack. I have created vulnerable servers for you to be able to hack or attack on.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。