Lite version of my Gatekeeper backdoor for public use.

Last update: Mar 25, 2022

Overview

MayorSec Backdoor

Fully functioning bind-type backdoor

This backdoor is a fully functioning bind shell and lite version of my full functioning Gatekeeper tool. It can be ran with Python or compiled to an exe and has full functioning command line access with Windows and Linux. When compiled it bypasses all Antivirus solutions on Antiscan.me.

Usage

Connect using Netcat after changing the port value to whatever you wish (default is 8180)

nc ipaddr port

Once connected you can utilize commands as normal. If you wish to use Powershell commands, make sure to lead with

powershell

This will execute the command. Note that some Powershell functionality may crash the Netcat session requiring a reconnect.

Compilation

This tool can be ran on systems that have Python3 installed, or can be compiled to exe using Pyinstaller. I recommend using the GUI version of Pyinstaller called "Auto Py to EXE" which allows for the easy addition of an exe icon for the application. The included .exe is set to utilize port 8180.

Notes

Windows will likely require a firewall rule in order to utilize this tool on machines with firewall enabled. You can achieve persistence through typical manual Registry edits, scheduled tasks, etc.

Comments

Add license scan report and status
Your FOSSA integration was successful! Attached in this PR is a badge and license report to track scan status in your README.

Below are docs for integrating FOSSA license checks into your CI:

CircleCI

TravisCI

Jenkins

Other
opened by fossabot 1

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

21 Jan 1, 2023

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr 64bit2key.py

15 Nov 26, 2022

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

📂 Public Bug Bounty Targets Data By BugBountyResources A collection of over 5.1M sub-domains and assets belonging to bug bounty targets, all put in a

87 Dec 13, 2022

Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software in packages called containers However, 'security' is a top request on Docker's public roadmap This project aims at vulnerability check for such docker containers. New contributions are accepted

Docker-Vulnerability-Check Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software i

103 Aug 20, 2022

Signatures and IoCs from public Volexity blog posts.

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. They are organised by year, and within each year

130 Dec 29, 2022

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service. This tool can help a digital forensic investigator to know the context, origin of specific files during a digital forensic investigation.

96 Dec 20, 2022

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Lite version of my Gatekeeper backdoor for public use.

Related tags

Overview

MayorSec Backdoor

Fully functioning bind-type backdoor

Usage

Compilation

Notes

You might also like...

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

Signatures and IoCs from public Volexity blog posts.

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Provides script to download and format public IP lists related to the Log4j exploit.

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Comments

Add license scan report and status

Releases(GLv1.0)

GLv1.0(Nov 15, 2021)

v1.0(Oct 14, 2021)

Owner

Joe Helle

POC for detecting the Log4Shell (Log4J RCE) vulnerability

Discord-keylogger - Discord keylogger With Python

Blinder is a tool that will help you simplify the exploitation of blind SQL injection

A Tool for subdomain scan with other tools

对naabu的端口扫描结果，调用nmap进行指纹识别

DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)

pwncat module that automatically exploits CVE-2021-4034 (pwnkit)

Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527) using standard Impacket.

Show apps recorded storage files by jailbreak

An interactive python script that enables root access on the T-Mobile (Wingtech) TMOHS1, as well as providing several useful utilites to change the configuration of the device.

Hadoop Yan RPC unauthorized RCE

Statistical Random Number Generator Attack Against The Kirchhoff-law-johnson-noise (Kljn) Secure Key Exchange Protocol

Scanning for CVE-2021-44228

A small script to export all AWAF policies from a BIG-IP device

CVE-log4j CheckMK plugin

Security tool to test different bypass of forbidden

Script Crack Facebook Premium 🚶‍♂

S2-061 的payload，以及对应简单的PoC/Exp

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

Python DNS Lookup: The Domain Name System (DNS) is basically the phonebook of the Internet