This is a collection of tools which might be useful for you, if you are a pentester or security consultant. All source code published on this website is licensed under the FreeBSD license.

Use the software at YOUR OWN RISK.
It is the user's responsibility to obey all applicable laws. The developer or Encripto AS assume no liability, and are not responsible for any misuse or damage caused by the software.

Do not download or use the software, if you do not agree with such license terms and conditions.

Maligno v1.1

Maligno is an open source penetration testing tool that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it over HTTP or HTTPS. The shellcode is encrypted with AES and encoded with Base64 prior to transmission.

Changelog: Metasploit multi-host support, socks4a server support (metasploit), last resort redirection for invalid requests and hosts out of scope, automatic client code obfuscation, delayed client payload execution, automatic metasploit resource file generation.



Inteno DG301 Command Injection PoC

This is a Proof of Concept (PoC) that illustrates a command injection vulnerability affecting Inteno DG301 residential gateways, discovered by Juan J. Güelfo at Encripto AS.



Netgear ProSafe PoC - CVE-2013-4775 & CVE-2013-4776

This is a Proof of Concept (PoC) that illustrates two vulnerabilities affecting Netgear ProSafe switches (CVE-2013-4775 & CVE-2013-4776), discovered by Juan J. Güelfo at Encripto AS.



Persongen v0.3

Persongen is a tool that generates Norwegian Social Security Numbers (SSNs). It implements Wikipedia's algorithm for calculating SSNs. SSNs are generated based on a given date of birth, gender, and SSN type. As you may guess, Persongen can be useful for testing applications which handle Norwegian SSNs.



@encriptoPostboks 2017, 6028 Ålesund, Norge