---
description: Various useful attack tools and techniques.
---

# Misc Attacks

## GIT

<table><thead><tr><th width="211">Tool</th><th>Details</th></tr></thead><tbody><tr><td><a href="https://github.com/gitleaks/gitleaks">gitleaks</a></td><td>Search for sensitive information in the git repository<br><code>gitleaks detect -v .</code> <em>(inside cloned git)</em></td></tr><tr><td><a href="https://pypi.org/project/git-dumper/">git-dumper</a></td><td>A tool to download a git repository from a website. Useful when you find the <code>.git</code> folder on a website.<br><code>git-dumper &#x3C;URL.GIT> &#x3C;OUTPUT></code></td></tr></tbody></table>

## Hidden File Extraction

<table><thead><tr><th width="211">Tool</th><th>Details</th></tr></thead><tbody><tr><td><a href="https://hexed.it/">hexed</a></td><td>Web site that allows you to edit the bytes of a file.</td></tr><tr><td><a href="https://www.aperisolve.com/">aperisolve</a></td><td>Website that performs various techniques for analyzing and extracting hidden files from images or similar.</td></tr><tr><td><a href="https://steghide.sourceforge.net/">steghide</a></td><td>Detect and hide files in images, videos, audio etc.<br><code>steghide info &#x3C;FILENAME></code><br><code>steghide extract -sf &#x3C;FILENAME></code></td></tr><tr><td><a href="https://github.com/Paradoxis/StegCracker">stegcracker</a></td><td>Allows brute force attacks on hidden files covered by passphrases.<br><code>stegcracker &#x3C;FILENAME> [&#x3C;WORDLIST>]</code></td></tr><tr><td><a href="https://github.com/ReFirmLabs/binwalk">binwalk</a></td><td>Tool used to analyze, decode and extract firmware images.<br><code>binwalk &#x3C;FILENAME></code><br><code>binwalk -e &#x3C;FILENAME></code>  <em>(extraction)</em></td></tr><tr><td><a href="https://salsa.debian.org/rul/foremost/tree/debian/sid">foremost</a></td><td>Foremost is a forensic program for recovering lost files based on their headers, footers and internal data structures.<br><code>foremost &#x3C;FILENAME></code><br><code>foremost -i &#x3C;INPUT.img> -o &#x3C;OUTPUT></code></td></tr></tbody></table>

## Other

<table><thead><tr><th width="196">Tool</th><th>Details</th></tr></thead><tbody><tr><td>pdfimages</td><td>Saves images from a PDF.<br><code>apt-get install poppler-utils</code> <br><code>pdfimages &#x3C;PDF_FILE> &#x3C;OUTFILE></code></td></tr><tr><td><a href="https://github.com/spipm/Depix">Depix</a></td><td>Recovers passwords from pixelized screenshots.<br><code>python3 depix.py -p &#x3C;IMAGE_TARGET> -s images/searchimages/debruinseq_notepad_Windows10_closeAndSpaced.png -o &#x3C;OUTFILE></code></td></tr></tbody></table>
