THE

SPRAWL

  •  
  •  
  •  
  • projectscategories

    password cracking

    password analysis and cracking kit

    Download PACK-0.0.4.tar.gz
    Size 68.8 KB
    DateAugust 8th, 2013
    Version0.0.4

    PACK (Password Analysis and Cracking Toolkit) is a collection of utilities developed to aid in analysis of password lists and enhancing cracking of passwords using password pattern detection. It can be used to reverse word mangling rules, generate source words, optimize password masks, craft policy attacks, etc. for the Hashcat family of tools. The toolkit itself is not able to crack passwords, but instead designed to make operation of password crackers more efficient. Read more.

    orapass sha1

    Download orapass-sha1.py
    Size 605 bytes
    DateAugust 17th, 2011
    Version0.1

    Orapass SHA1 implements Oracle's newer SHA1-based password hashing algorithm. This script can be used for password strength audit and recovery. Uses Python Hashlib library. Read more.

    orapass des

    Download orapass-des.py
    Size 1.6 KB
    DateFebruary 21st, 2009
    Version0.1

    Orapass implements Oracle's older DES-based password hashing algorithm. This script can be used for password strength audit and recovery. Uses Python Crypto library. Read more.

    privacy

    tor nodes

    Download tor-nodes.py
    Size 372 bytes
    DateAugust 27th, 2011
    Version0.2

    Enumerates IP addresses of Tor nodes by querying Tor client. Read more.

    tor autocircuit

    Download tor-autocircuit-0.2.tar.gz
    Size 37.9 KB
    DateOctober 28th, 2010
    Version0.2

    Tor Autocircuit automatically creates Tor circuits according to a predefined set of rules (e.g. geolocation, number of hops, etc.). This script requires TorCtl python library Read more.

    scanners

    airoscapy

    Download airoscapy.py
    Size 2.1 KB
    DateAugust 28th, 2011
    Version0.2

    Airoscapy is a passive wireless access point scanner. Using this tool you can monitor Access Point's SSID, BSSID, Channel and Encryption support. Read more.

    encryption

    sslmap

    Download sslmap-0.2.0.py
    Size 58.8 KB
    DateJanuary 27th, 2010
    Version0.2

    SSLMap is a lightweight TLS/SSL cipher suite scanner.

    • Uses custom TLS/SSL query engine for increased reliability/speed (No need for third-party libraries such as OpenSSL)
    • Tests for 200+ known cipher suites.
    • Capable of discovering undocumented cipher suites.
    • Advises on cipher suite security based on Protocol, Key Exchange, Authentication, Encryption algorithm, and other parameters.
    • Configurable handshake versions (e.g. TLSv1.1, SSLv2.0) Read more.

    warrock protocol analyzer

    Download wr-protocol.py
    Size 1.2 KB
    DateJanuary 1st, 2009
    Version0.1

    Warrock Protocol Analyzer decodes encoded traffic generated by a popular game Warrock. Using this tool, you can study the protocol, intercept login and password in clear text, use as a foundation for active attacks. You need Scapy for this script to work. Read more.

    caesar cipher

    Download caesar-cipher.pl
    Size 2.1 KB
    DateJuly 4th, 2008
    Version0.1

    An exercise in decrypting of shift-based ciphers. Supports frequency analysis and brute force mechanisms for decryption. Read more.

    denial of service

    syn flooder

    Download synflood.pl
    Size 476 bytes
    DateJuly 4th, 2008
    Version0.1

    A proof of concept script to perform a SYN flood attack on a target host. Requires Net::RawIP module. Read more.

    geoip

    opte2kml

    Download opte2kml.pl
    Size 3.3 KB
    DateJanuary 27th, 2010
    Version0.1

    Opte2KML converts Opte Project database of Internet backbones to Google Earth KML format Read more.

    geoip2kml

    Download Not Available
    Size Not Available
    DateJanuary 27th, 2010
    Version0.1

    Generate Google Earth KML files using provided GeoIP database. Read more.

    proxy

    dnschef

    Download dnschef-0.3.zip
    Size 2.5 MB
    DateNovember 6th, 2014
    Version0.3

    DNSChef is a highly configurable DNS Proxy for Penetration Testers and Malware Analysts. It is capable of fine configuration of which DNS replies to modify or to simply proxy with real responses.

    Version 0.3 introduces support for more DNS record types, DNSSEC, logging, more configurable remote nameservers, support for the updated dnslib library and several bug fixes.

    Version 0.2 introduces IPv6 support, large number of new DNS record types, custom ports and other frequently requested features. Read more.

    search engine

    search engine assessment tool

    Download seat-0.3.tar.bz2
    Size 1.3 MB
    DateFebruary 20th, 2009
    Version0.3

    SEAT (Search Engine Assessment Tool) is the next generation information digging application geared toward the needs of security professionals. SEAT uses information stored in search engine databases, cache repositories, and other public resources to scan a site for potential vulnerabilities. Its multi-threaded, multi-database, and multi-search-engine capabilities permit easy navigation through vast amounts of information with a goal of system security assessment. Furthermore, SEAT’s ability to easily process additional search engine signatures as well as custom made vulnerability databases allows security professionals to adapt SEAT to their specific needs. Read more.

    reverse engineering

    ida patcher

    Download idapatcher-1.2.zip
    Size 6.0 KB
    DateSeptember 13th, 2014
    Version1.2

    IDA Patcher is a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's ability to patch binary files and memory. The plugin is useful for tasks related to malware analysis, exploit development as well as bug patching. IDA Patcher blends into the standard IDA user interface through the addition of a subview and several menu items. Read more.

    ida pomidor

    Download idapomidor-1.0.zip
    Size 69.5 KB
    DateSeptember 12th, 2014
    Version1.0

    IDA Pomidor is a plugin for Hex-Ray's IDA Pro disassembler that will help you retain concentration and productivity during long reversing sessions. Read more.

    exploitation

    ida sploiter

    Download idasploiter-1.0.zip
    Size 25.4 KB
    DateSeptember 14th, 2014
    Version1.0

    IDA Sploiter is a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's capabilities as an exploit development and vulnerability research tool. Some of the plugin's features include a powerful ROP gadgets search engine, semantic gadget analysis and filtering, interactive ROP chain builder, stack pivot analysis, writable function pointer search, cyclic memory pattern generation and offset analysis, detection of bad characters and memory holes, and many others. Read more.

    π
    ///\oo/\\\