Lite version of my Gatekeeper backdoor for public use.

Last update: Mar 25, 2022

Overview

MayorSec Backdoor

Fully functioning bind-type backdoor

This backdoor is a fully functioning bind shell and lite version of my full functioning Gatekeeper tool. It can be ran with Python or compiled to an exe and has full functioning command line access with Windows and Linux. When compiled it bypasses all Antivirus solutions on Antiscan.me.

Usage

Connect using Netcat after changing the port value to whatever you wish (default is 8180)

nc ipaddr port

Once connected you can utilize commands as normal. If you wish to use Powershell commands, make sure to lead with

powershell

This will execute the command. Note that some Powershell functionality may crash the Netcat session requiring a reconnect.

Compilation

This tool can be ran on systems that have Python3 installed, or can be compiled to exe using Pyinstaller. I recommend using the GUI version of Pyinstaller called "Auto Py to EXE" which allows for the easy addition of an exe icon for the application. The included .exe is set to utilize port 8180.

Notes

Windows will likely require a firewall rule in order to utilize this tool on machines with firewall enabled. You can achieve persistence through typical manual Registry edits, scheduled tasks, etc.

Comments

Add license scan report and status
Your FOSSA integration was successful! Attached in this PR is a badge and license report to track scan status in your README.

Below are docs for integrating FOSSA license checks into your CI:

CircleCI

TravisCI

Jenkins

Other
opened by fossabot 1

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

21 Jan 1, 2023

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr 64bit2key.py

15 Nov 26, 2022

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

📂 Public Bug Bounty Targets Data By BugBountyResources A collection of over 5.1M sub-domains and assets belonging to bug bounty targets, all put in a

87 Dec 13, 2022

Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software in packages called containers However, 'security' is a top request on Docker's public roadmap This project aims at vulnerability check for such docker containers. New contributions are accepted

Docker-Vulnerability-Check Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software i

103 Aug 20, 2022

Signatures and IoCs from public Volexity blog posts.

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. They are organised by year, and within each year

130 Dec 29, 2022

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service. This tool can help a digital forensic investigator to know the context, origin of specific files during a digital forensic investigation.

96 Dec 20, 2022

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Lite version of my Gatekeeper backdoor for public use.

Related tags

Overview

MayorSec Backdoor

Fully functioning bind-type backdoor

Usage

Compilation

Notes

You might also like...

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

Signatures and IoCs from public Volexity blog posts.

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Provides script to download and format public IP lists related to the Log4j exploit.

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Comments

Add license scan report and status

Releases(GLv1.0)

GLv1.0(Nov 15, 2021)

v1.0(Oct 14, 2021)

Owner

Joe Helle

CSAW 2021 writeups

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

Yesitsme - Simple OSINT script to find Instagram profiles by name and e-mail/phone

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Laravel RCE (CVE-2021-3129)

🏃 Python Solutions of All Problems in FHC 2021 (In Progress)

Tinyman exploit finder - Tinyman exploit finder for python

A passive-recon tool that parses through found assets and interacts with the Hackerone API

A windows post exploitation tool that contains a lot of features for information gathering and more.

AIL LeakFeeder: A Module for AIL Framework that automate the process to feed leaked files automatically to AIL

Dependency injection in python with autoconfiguration

Hikvision 流媒体管理服务器敏感信息泄漏

Springboot directory scanning

Use scrapli to retrieve security zone information from a Juniper SRX firewall

Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)

Brute force attack tool for Azure AD Autologon/Seamless SSO

Chapter 1 of the AWS Cookbook

😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

This is a Python program that implements a vacuum cleaner as an Artificial Intelligence.

Simulating Log4j Remote Code Execution (RCE) vulnerability in a flask web server using python's logging library with custom formatter that simulates lookup substitution by executing remote exploit code.