Lite version of my Gatekeeper backdoor for public use.

Last update: Mar 25, 2022

Overview

Gatekeeper Lite Backdoor

Fully functioning bind-type backdoor

This backdoor is a fully functioning bind shell and lite version of my full functioning Gatekeeper tool. It can be ran with Python or compiled to an exe and has full functioning command line access with Windows and Linux. When compiled it bypasses all Antivirus solutions on Antiscan.me.

Usage

Connect using Netcat after changing the port value to whatever you wish (default is 8180)

nc ipaddr port

Once connected you can utilize commands as normal. If you wish to use Powershell commands, make sure to lead with

powershell

This will execute the command. Note that some Powershell functionality may crash the Netcat session requiring a reconnect.

SMTP Exfiltration

MayorSec Backdoor has built in exfiltration functionality via SMTP. Use the below format from the command line.

exfiltrate filename

Compilation

This tool can be ran on systems that have Python3 installed, or can be compiled to exe using Pyinstaller. I recommend using the GUI version of Pyinstaller called "Auto Py to EXE" which allows for the easy addition of an exe icon for the application.

Notes

Windows will likely require a firewall rule in order to utilize this tool on machines with firewall enabled. You can achieve persistence through typical manual Registry edits, scheduled tasks, etc.

License

Comments

Add license scan report and status
Your FOSSA integration was successful! Attached in this PR is a badge and license report to track scan status in your README.

Below are docs for integrating FOSSA license checks into your CI:

CircleCI

TravisCI

Jenkins

Other
opened by fossabot 1

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

21 Jan 1, 2023

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr 64bit2key.py

15 Nov 26, 2022

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

📂 Public Bug Bounty Targets Data By BugBountyResources A collection of over 5.1M sub-domains and assets belonging to bug bounty targets, all put in a

87 Dec 13, 2022

Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software in packages called containers However, 'security' is a top request on Docker's public roadmap This project aims at vulnerability check for such docker containers. New contributions are accepted

Docker-Vulnerability-Check Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software i

103 Aug 20, 2022

Signatures and IoCs from public Volexity blog posts.

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. They are organised by year, and within each year

130 Dec 29, 2022

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service. This tool can help a digital forensic investigator to know the context, origin of specific files during a digital forensic investigation.

96 Dec 20, 2022

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Lite version of my Gatekeeper backdoor for public use.

Related tags

Overview

Gatekeeper Lite Backdoor

Fully functioning bind-type backdoor

Usage

SMTP Exfiltration

Compilation

Notes

License

You might also like...

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

Signatures and IoCs from public Volexity blog posts.

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source

Provides script to download and format public IP lists related to the Log4j exploit.

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Comments

Add license scan report and status

Releases(GLv1.0)

GLv1.0(Nov 15, 2021)

v1.0(Oct 14, 2021)

Owner

Joe Helle

Mips script decompiles MIPS assembly instructions & bot functionality

Log4j-Scanner with Bind-Receipt and custom hostnames

The Web Application Firewall Paranoia Level Test Tool.

Tools ini digunakan untuk krekk pacebuk:v

Cloud One Container Security Runtime Events Forwarder

Malware Configuration And Payload Extraction

Agile Threat Modeling Toolkit

This is a keylogger in python for Windows, Mac and Linux!

Make your own huge Wordlist with advanced options

Having a weak password is not good for a system that demands high confidentiality and security of user credentials

RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.

Guess the password for Tik Tok accounts

This is an advanced backdoor, created with Python

Tool for finding PHP source code vulnerabilities.

A Python replicated exploit for Webmin 1.580 /file/show.cgi Remote Code Execution

STATS305C: Applied Statistics III (Spring, 2022)

ssh-audit is a tool for ssh server & client configuration auditing.

Rouge Spammers with a mission to disrupt the peace of the valley ? Fear not we will STOMP the Spammers

Python Toolkit containing different Cyber Attacks Tools

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.