Lite version of my Gatekeeper backdoor for public use.

Last update: Mar 25, 2022

Overview

Gatekeeper Lite Backdoor

Fully functioning bind-type backdoor

This backdoor is a fully functioning bind shell and lite version of my full functioning Gatekeeper tool. It can be ran with Python or compiled to an exe and has full functioning command line access with Windows and Linux. When compiled it bypasses all Antivirus solutions on Antiscan.me.

Usage

Connect using Netcat after changing the port value to whatever you wish (default is 8180)

nc ipaddr port

Once connected you can utilize commands as normal. If you wish to use Powershell commands, make sure to lead with

powershell

This will execute the command. Note that some Powershell functionality may crash the Netcat session requiring a reconnect.

SMTP Exfiltration

MayorSec Backdoor has built in exfiltration functionality via SMTP. Use the below format from the command line.

exfiltrate filename

Compilation

This tool can be ran on systems that have Python3 installed, or can be compiled to exe using Pyinstaller. I recommend using the GUI version of Pyinstaller called "Auto Py to EXE" which allows for the easy addition of an exe icon for the application.

Notes

Windows will likely require a firewall rule in order to utilize this tool on machines with firewall enabled. You can achieve persistence through typical manual Registry edits, scheduled tasks, etc.

License

Comments

Add license scan report and status
Your FOSSA integration was successful! Attached in this PR is a badge and license report to track scan status in your README.

Below are docs for integrating FOSSA license checks into your CI:

CircleCI

TravisCI

Jenkins

Other
opened by fossabot 1

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

21 Jan 1, 2023

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr 64bit2key.py

15 Nov 26, 2022

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

📂 Public Bug Bounty Targets Data By BugBountyResources A collection of over 5.1M sub-domains and assets belonging to bug bounty targets, all put in a

87 Dec 13, 2022

Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software in packages called containers However, 'security' is a top request on Docker's public roadmap This project aims at vulnerability check for such docker containers. New contributions are accepted

Docker-Vulnerability-Check Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software i

103 Aug 20, 2022

Signatures and IoCs from public Volexity blog posts.

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. They are organised by year, and within each year

130 Dec 29, 2022

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service. This tool can help a digital forensic investigator to know the context, origin of specific files during a digital forensic investigation.

96 Dec 20, 2022

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Lite version of my Gatekeeper backdoor for public use.

Related tags

Overview

Gatekeeper Lite Backdoor

Fully functioning bind-type backdoor

Usage

SMTP Exfiltration

Compilation

Notes

License

You might also like...

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

Signatures and IoCs from public Volexity blog posts.

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Provides script to download and format public IP lists related to the Log4j exploit.

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Comments

Add license scan report and status

Releases(GLv1.0)

GLv1.0(Nov 15, 2021)

v1.0(Oct 14, 2021)

Owner

Joe Helle

2021hvv漏洞汇总

A python package with tools to read and postprocess the output of the channel DNS-solver (davecats/channel), as well as its associated postprocessing tools.

A small utility to deal with malware embedded hashes.

Remote Desktop Protocol in Twisted Python

自动化爆破子域名，并遍历所有端口寻找http服务，并使用crawlergo、dirsearch、xray等工具扫描并集成报告；支持动态添加扫描到的域名至任务；

A Modified version of TCC's Osprey poc framework......

SonicWall SMA-100 Unauth RCE Exploit (CVE-2021-20038)

Script Crack Facebook Elite 🚶‍♂

Visibility and Mitigation for Log4J vulnerabilities

A Python 3 script that uploads a tasks.pickle file that enables RCE in MotionEye

Hacktricks - Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

PrivateRoom - Make your work private by building a system using arduino which instantly kills a program when someone enters your room/cabin

A CTF2.5/MMF2 Decompiler

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

Simple yara rule manager

simple python keylogger

Fast python tool to test apache path traversal CVE-2021-41773 in a List of url

"KeyLogger-WebService" Is a Keylogger Write In python.

BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.

A Python script that can be used to check if a SAP system is affected by CVE-2022-22536