dnscat2
Kaitai Struct
| dnscat2 | Kaitai Struct | |
|---|---|---|
| 5 | 44 | |
| 3,257 | 3,830 | |
| - | 0.9% | |
| 0.0 | 7.5 | |
| about 2 months ago | 16 days ago | |
| PHP | Shell | |
| BSD 3-clause "New" or "Revised" License | GPL-3.0-or-later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
dnscat2
- HOUDINI: A web app with huge number of Docker Images for Network Security with run commands and cheatsheet (Hundreds of Offensive and Useful Docker Images for Network Intrusion )
-
Awesome CTF : Top Learning Resource Labs
Dnscat2 - Hosts communication through DNS.
- Are there any methods to protect against DNS tunneling (non-encrypted) in an open-source firewall appliance?
-
Awesome Penetration Testing
dnscat2 - Tool designed to create an encrypted command and control channel over the DNS protocol, which is an effective tunnel out of almost every network.
-
DNS exfiltration of data: step-by-step simple guide
Another commonly used tool is dnscat. I’ve seen it successfully used by adversaries and during pentests.
Kaitai Struct
- Reverse-engineering an encrypted IoT protocol
-
Parsing an Undocumented File Format
- ImHex [2], which has a pattern language [3] which allows parsing, and it seems more powerful than what Kaitai offers. I stumbled upon some limitations with it but it was still useful.
[1]: https://kaitai.io/
- Kaitai Struct – a declarative language used to describe binary data structures
-
HTTPie Desktop: cross-platform API testing client for humans
Beautiful. Didn't know something like this exists. Reminds me of Katai[0]
[0]. https://kaitai.io/
-
Hacking the LG Monitor's EDID
An EDID override like this would be helpful for macOS as well, where the monitors swapping around after standby is a real annoyance [0] [1]
EDID rewrites are 99% of the time blocked by the monitor firmware: https://notes.alinpanaitiu.com/Decoding-monitor-EDID-on-macO...
By the way, one helpful tool that helped me navigate the EDID dump was Kaitai Struct [2]. It shows a side by side view with the hex view and the EDID structure, and it highlights the hex values in real time as you navigate the structure. Unfortunately [3] it doesn't support the extension blocks that the author needs.
[0] https://notes.alinpanaitiu.com/Weird-monitor-bugs
[1] https://forums.macrumors.com/threads/external-displays-swapp...
[2] https://kaitai.io/
[3] https://github.com/kaitai-io/edid.ksy
- Kaitai Struct: new way to develop parsers for binary structures
-
Fq: Jq for Binary Formats
Kaitai Struct might be a good choice for that: https://kaitai.io/
-
Ingesting, parsing and making sense of device log data
For binary log format, there's the excellent Kaitai Struct frameworks, that make it very easy to generate parsers from a declarative schema
-
What is this tool? More info in comments
kaitai
-
Visual Programming with Elixir: Learning to Write Binary Parsers (2019)
https://kaitai.io/
Worth a look if you are writing binary parsers.
What are some alternatives?
iodine - Official git repo for iodine dns tunnel
Protobuf - Protocol Buffers - Google's data interchange format
Metasploit - Metasploit Framework
csvkit - A suite of utilities for converting to and working with CSV, the king of tabular file formats.
RsaCtfTool - RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
Camelot - A Python library to extract tabular data from PDFs
pwntools - CTF framework and exploit development library
tablib - Python Module for Tabular Datasets in XLS, CSV, JSON, YAML, &c.
hashcat - World's fastest and most advanced password recovery utility
PDFMiner - Python PDF Parser (Not actively maintained). Check out pdfminer.six.
bettercap - The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.
PyYAML