Aerosol Posted January 13, 2015 Report Posted January 13, 2015 Am observat ca este postata o varianta mai veche pe forum asa ca m-am gandit sa postez si aceasta versiune.====================================================================Maligno is an open source penetration testing tool written in Python that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it over HTTP or HTTPS. The shellcode is encrypted with AES and encoded prior to transmission.Maligno also comes with a client tool, which supports HTTP, HTTPS and encryption capabilities. The client is able to connect to Maligno in order to download an encrypted Metasploit payload. Once the shellcode is received, the client will decode it, decrypt it and inject it in the target machine.The client-server communications can be configured in a way that allows you to simulate specific C&C communications or targeted attacks. In other words, the tool can be used as part of adversary replication engagements.Changelog: Adjustments to server and client HTTP request headers for improved adversary replication, invocation of socks4a auxiliary module migrated from msfcli to msfconsole, other minor fixes.sha-256sum: 43f36f577dec1520eff727da3da49af10f27705a92d3ecf435b6d6c1ff4a669aDownloadChanges: Adjustments to server and client HTTP request headers for improved adversary replication, invocation of socks4a auxiliary module migrated from msfcli to msfconsole, other minor fixes. Quote
Aerosol Posted March 1, 2015 Author Report Posted March 1, 2015 Update to Maligno 2.0Changes: Adversary replication functionality improvements. POST and HEAD method support added, new client profile added, server multithreading support added, perpetual shell mode added, client static HTTP(S) proxy support added, documentation and stability improvements.sha-256sum: 546b134942e14428952c2ca513d63be123eda20b6838f21a030ccbaee216ac44Download Quote
KhiZaRix Posted April 20, 2015 Report Posted April 20, 2015 Update to Maligno 2.1 Download: Maligno 2.1 ? Packet StormChangesClientgen now supports standalone script generation, without requiring Maligno server component for downloading a payload. Cookie support added. Payload parameter + ID can be provided via a cookie. Various other updates and improvements. Quote