Lite version of my Gatekeeper backdoor for public use.

Last update: Mar 25, 2022

Overview

MayorSec Backdoor

Fully functioning bind-type backdoor

This backdoor is a fully functioning bind shell and lite version of my full functioning Gatekeeper tool. It can be ran with Python or compiled to an exe and has full functioning command line access with Windows and Linux. When compiled it bypasses all Antivirus solutions on Antiscan.me.

Usage

Connect using Netcat after changing the port value to whatever you wish (default is 8180)

nc ipaddr port

Once connected you can utilize commands as normal. If you wish to use Powershell commands, make sure to lead with

powershell

This will execute the command. Note that some Powershell functionality may crash the Netcat session requiring a reconnect.

Compilation

This tool can be ran on systems that have Python3 installed, or can be compiled to exe using Pyinstaller. I recommend using the GUI version of Pyinstaller called "Auto Py to EXE" which allows for the easy addition of an exe icon for the application. The included .exe is set to utilize port 8180.

Notes

Windows will likely require a firewall rule in order to utilize this tool on machines with firewall enabled. You can achieve persistence through typical manual Registry edits, scheduled tasks, etc.

Comments

Add license scan report and status
Your FOSSA integration was successful! Attached in this PR is a badge and license report to track scan status in your README.

Below are docs for integrating FOSSA license checks into your CI:

CircleCI

TravisCI

Jenkins

Other
opened by fossabot 1

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

21 Jan 1, 2023

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr 64bit2key.py

15 Nov 26, 2022

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

📂 Public Bug Bounty Targets Data By BugBountyResources A collection of over 5.1M sub-domains and assets belonging to bug bounty targets, all put in a

87 Dec 13, 2022

Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software in packages called containers However, 'security' is a top request on Docker's public roadmap This project aims at vulnerability check for such docker containers. New contributions are accepted

Docker-Vulnerability-Check Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software i

103 Aug 20, 2022

Signatures and IoCs from public Volexity blog posts.

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. They are organised by year, and within each year

130 Dec 29, 2022

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service. This tool can help a digital forensic investigator to know the context, origin of specific files during a digital forensic investigation.

96 Dec 20, 2022

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Lite version of my Gatekeeper backdoor for public use.

Related tags

Overview

MayorSec Backdoor

Fully functioning bind-type backdoor

Usage

Compilation

Notes

You might also like...

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

Signatures and IoCs from public Volexity blog posts.

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Provides script to download and format public IP lists related to the Log4j exploit.

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Comments

Add license scan report and status

Releases(GLv1.0)

GLv1.0(Nov 15, 2021)

v1.0(Oct 14, 2021)

Owner

Joe Helle

A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021)

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

The probability of having the password you want in the PassMaker is +90%!!

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

Mass scan for .git repository and .env file exposure

Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10

Fast and easy way to rollout on multiple GitLab project file a particular content.

Code to do NF in HDR,HEVC,HPL,MPL

A simple multi-threaded distributed SSH brute-forcing tool written in Python.

Bandit is a tool designed to find common security issues in Python code.

A signature parser for hikari's command handler tanjun.

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Zero-attacker is an multipurpose hacking tool with over 12 tools

Hadoop Yan RPC unauthorized RCE

Ini membuat tema berbasis bendera Indonesia with Python + Linux.py

ThePhish: an automated phishing email analysis tool

(D)arth (S)ide of the (L)og4j (F)orce, the ultimate log4j vulnerabilities assessor

CVE-2022-23046 - SQL Injection Vulnerability on PhpIPAM v1.4.4