Maurice Lambert

404 Not Found… Are you lost ?

Talks, Research and Lessons

• Talk 1 - Bank security
• Talk 2 - Bypass antivirus
• Talk 7 - Incident response
• BTS lesson 1 - Challenges Web Hacking
• BTS lesson 2 - Dev/Admin
• BTS lesson 3 - Career
• WebScripts explained
• HTTP - Web Server Identifier
• Ransomware Research POC - English, Ransomware Research POC - French

Escape game

• K41r0 - introduction
• K41r0 - solutions, hint - Game Master only !

Web App

• Government Data Analysis
• Calcul Mentale Web App Training

Python

Security tools

• PickleExploit Documentation
• WebSiteCloner.HTTPLogger Documentation
• WebSiteCloner.WebSiteCloner Documentation
• PyEmailTools.Email Documentation
• PyEmailTools.Forger Documentation
• PyEmailTools.ImapClient Documentation
• PyEmailTools.PopClient Documentation
• PyEmailTools.Reader Documentation
• PyEmailTools.SmtpClient Documentation
• RansomWare Documentation
• SpyWare Documentation
• SpyWare.AudioLogger Documentation, Configuration
• ClipboardLogger Documentation, Configuration
• SpyWare.DomainsLogger Documentation, Configuration
• SpyWare.FilesLogger Documentation, Configuration
• SpyWare.KeyLogger Documentation, ConfigurationCalcul Mentale Web App Trainaing
• SpyWare.ScreenLogger Documentation, Configuration
• SpyWare.WebcamLogger Documentation, Configuration
• ChromePasswordsStealer Documentation
• FileAnalysis Documentation
• PyObfuscator Documentation
• PyWCGIshell Documentation
• WordListGenerator Documentation
• SteganograPy Documentation
• ZipSteganograPy Documentation
• WebServerIdentifier Documentation
• SimpleHttpProxy Documentation
• PDForensic Documentation
• WebPayloadsEncodings Documentation
• MaliciousPDF Documentation
• EmojiEncode Documentation
• PDForensic Documentation
• Cr0wl3r Documentation
• ReverseShell Documentation
• EntropyEncoding Documentation
• EntropyAnalysis Documentation
• ElfAnalyzer Documentation
• mRemoteNGpasswordsStealer Documentation
• PeInjector Documentation
• PyPeLoader Documentation
• PyPePacker Documentation
• PyPeUrlLoader Documentation
• QueryCombinedLogFormat Documentation
• TotpApp Documentation
• ComboundFileParser Documentation
• DiskAnalyzer Documentation
• NtfsAnalyzer Documentation
• MftAnalyzer Documentation
• Win32Hooking Documentation
• BinaryFileReader.HexaReader Documentation
• BinaryFileReader.Strings Documentation
• BinaryFileReader.MagicStrings Documentation
• PyAsyncDNS client Documentation
• PyAsyncDNS server Documentation
• PyAsyncDNS exfiltrator Documentation
• PyAsyncDNS exfiltrator server Documentation

• SupplyChainAnalysis Documentation

• PyAsyncDNS executable
• BinaryFileReader Python Executable
• Strings Python Executable
• HexaReader Python Executable
• MagicStrings Python Executable
• BinaryFileReader Python Windows Executable
• Strings Python Windows Executable
• HexaReader Python Windows Executable
• MagicStrings Python Windows Executable
• PyEmailTools Executable
• WebSiteCloner Executable
• RansomWare Executable
• SpyWare Executable
• SpyWare.AudioLogger Executable
• SpyWare.CopyLogger Executable
• SpyWare.DomainsLogger Executable
• SpyWare.FilesLogger Executable
• SpyWare.KeyLogger Executable
• SpyWare.WebcamLogger Executable
• ChromePasswordsStealer Executable
• FileAnalysis Executable
• PyObfuscator Executable
• WordListGenerator Executable
• SteganograPy Executable
• ZipSteganograPy Executable
• WebServerIdentifier Executable
• SimpleHttpProxy Executable
• PDForensic Executable
• WebPayloadsEncodings Executable
• MaliciousPDF Executable
• EmojiEncode Executable
• PDForensic Executable
• SIDAnalyzer Executable
• Cr0wl3r Executable
• ReverseShell Executable
• ProgramExecutableAnalyzer Executable
• ProgramExecutableAnalyzer Windows Executable
• EntropyAnalysis Executable
• EntropyAnalysis Windows Executable
• AsyncRemoteShell Python Executable
• ElfAnalyzer Python Executable
• mRemoteNGpasswordsStealer Python Executable
• PeInjector Python Executable
• PyPeLoader Python Executable
• PyPePacker Python Executable
• PyPeUrlLoader Python Executable
• QueryCombinedLogFormat Python Executable
• TotpApp Python Executable
• DiskAnalyzer Executable
• NtfsAnalyzer Executable
• MftAnalyzer Executable
• Win32Hooking Executable
• SupplyChainAnalysis Executable

Network

• PacketAnalysis.PacketPrinter Documentation
• PacketAnalysis.Sniffer Documentation
• ArpSpoof Documentation
• NetbiosSpoof Documentation
• WifiDeauth Documentation
• PasswordsSniffer Documentation
• SynFlood Documentation
• NetworkSniffer Documentation

• NetworkScanner Documentation

• PacketAnalysis Executable
• ArpSpoof Executable
• NetbiosSpoof Executable
• WifiDeauth Executable
• PasswordsSniffer Executable
• SynFlood Executable
• NetworkSniffer Executable
• NetworkScanner Executable

Crypto

• RC6Encryption Documentation
• RC4Encryption Documentation
• CustomCrypto Documentation
• ViginereBreaker Documentation

• MiniVault Documentation

• RC6Encryption Executable
• RC4Encryption Executable
• ViginereBreaker Executable

WebScripts

• WebScripts.init Documentation
• WebScripts.WebScripts Documentation
• WebScripts.Pages Documentation
• WebScripts.commons Documentation
• WebScripts.utils Documentation
• WebScripts.Errors Documentation
• Default database manager for WebScripts
• Default upload manager for WebScripts
• Default request manager for WebScripts
• Default module errors for WebScripts
• WebScriptsClient Documentation

• WebScriptsTools Documentation

• cgi Documentation
• Configurations Documentation
• csp Documentation
• get_request Documentation
• hardening Documentation
• index Documentation
• JsonRpc Documentation
• notification Documentation
• rss Documentation
• share Documentation

• __init__ Documentation

• WebScriptsClient Executable

Security audits

• SkipFish
• ZAP
• nikto
• audit Linux
• audit Windows
• Audit Docker Apache
• Audit Docker
• Audit Docker nginx

Vulnerability

• Apache HTTPD RCE & Local File Disclosure - CVE-2021-41773
• Apache HTTPD RCE & Local File Disclosure - CVE-2021-42013

Dev tools

• HttpClientMultipart Documentation
• LatinUtilities Documentation
• BinaryFileReader Documentation
• UrlTasker Documentation

• PyAsyncScheduler Documentation

• LatinUtilities Executable
• HttpClientMultipart Executable

Network

• GSMEncoding Documentation
• LocalResolver Documentation
• Tracert Documentation
• SimpleWhois Documentation

• JsonRpcExtended Documentation

• LocalResolver Executable
• Tracert Executable
• SimpleWhois Python Executable

Console && terminal tools

• CustomShell Documentation

• PyProgressTerm Documentation

• CustomShell Executable
• PyProgressTerm Executable

Python dev tools

• PythonToolsKit.Timeout Documentation
• PythonToolsKit.Terminal Documentation
• PythonToolsKit.StringF Documentation
• PythonToolsKit.PrintF Documentation
• PythonToolsKit.Process Documentation
• PythonToolsKit.Logs Documentation
• PythonToolsKit.GetPass Documentation
• PythonToolsKit.Encodings Documentation
• PythonToolsKit.DictObject Documentation
• PythonToolsKit.Report Documentation
• PythonToolsKit.urlopen Documentation
• PythonToolsKit.Dict Documentation
• PythonToolsKit.Arguments Documentation
• PythonToolsKit.Function Documentation
• PythonToolsKit.List Documentation
• PythonToolsKit.Tuple Documentation
• PythonToolsKit.GetFile Documentation
• PythonToolsKit.GetType Documentation
• PythonToolsKit.Import Documentation
• PythonToolsKit.ScapyTools Documentation
• PythonToolsKit.Thread Documentation
• PythonToolsKit.Json Documentation
• PythonToolsKit.Random Documentation
• PythonToolsKit.WindowsTerminal Documentation
• PythonToolsKit.Colors Documentation
• PythonToolsKit.DataAnalysis Documentation
• PythonToolsKit.RecursionDebug Documentation
• PythonToolsKit.OrdDict Documentation
• Characters Documentation
• DebugEncoding Documentation
• UpgradePipPackages Documentation

• PegParser Documentation

• UpgradePipPackages Executable

Python Linux tools

• LinuxMemoryStatistics Documentation
• LinuxMemoryStatistics Executable

Perl

Forensic

• TRAP Documentation
• TRAP::Compare Documentation

Ruby

Vulnerability

• IIS DOS - CVE-2022-21907
• IIS DOS - CVE-2021-31166
• Apache HTTPD RCE & Local File Disclosure - CVE-2021-41773
• Apache HTTPD RCE & Local File Disclosure - CVE-2021-42013

Metasploit

• [CVE-2021-41773][CODE] Apache Path Traversal 001
• [CVE-2021-41773][DOCUMENTATION] Apache Path Traversal 001
• [CVE-2021-42013][CODE] Apache Path Traversal 002
• [CVE-2021-42013][DOCUMENTATION] Apache Path Traversal 002
• [CVE-2021-31166][CODE][Python] HTTP Protocol Stack Remote Code Execution Vulnerability 001
• [CVE-2022-21907][CODE][Python] HTTP Protocol Stack Remote Code Execution Vulnerability 002
• [CVE-2021-31166][CODE][Ruby] HTTP Protocol Stack Remote Code Execution Vulnerability 001
• [CVE-2022-21907][CODE][Ruby] HTTP Protocol Stack Remote Code Execution Vulnerability 002
• [CVE-2021-31166][DOCUMENTATION][Ruby] HTTP Protocol Stack Remote Code Execution Vulnerability 001
• [CVE-2022-21907][DOCUMENTATION][Ruby] HTTP Protocol Stack Remote Code Execution Vulnerability 002

Web eicar tests

• eicarspam HTML
• eicarspam PDF