SharpCovertTube

SharpCovertTube SharpCovertTube is a program created to control Windows systems remotely by uploading videos to Youtube. The program monitors a Youtube channel until a video is uploaded, decodes the QR code from the thumbnail of the uploaded video and executes a command. The QR codes in the video...

dicerosbicornis

DicerosBicornis A stealthy Python based Windows backdoor that uses email as a command and control server. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module pypiwin32 module Features Encrypted transportation messages AES + SHA256 hashing Generate computer unique id...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + Ransomware Disclaimer This project is solely for educational purposes. This project utilise code from rkshrksh/2048-Game and kangtastic/cve-2019-2215. Project Description This project is part of Singapore Institute of Technology Mobile Security module. The project...

Shellcrypt

Shellcrypt A single-file cross-platform quality of life tool to obfuscate a given shellcode file and output in a useful format for pasting directly into your source code. Contributors These are going here because they deserve it An00bRektn github twitter ♥ 0xtejas github Encryption Methods...

cve-2025-59287

CVE-2025-59287 - WSUS Exploitation Toolkit by adel-h4x0a ⚠️ For Educational and Authorized Testing Purposes Only ⚠️ Overview This toolkit demonstrates the exploitation of CVE-2025-59287, a remote code execution vulnerability in Windows Server Update Services WSUS. Components 1. Encryption Module...

Steganography-Online-Codec-JavaScript

Steganography Online Codec SDK for JavaScript & NPM Steganographic Online Codec allows you to hide a password encrypted message within the images & photos using AES encryption algorithm with a 256-bit PBKDF2 derived key. You can use it for free at:...

FilelessPELoader

FilelessPELoader Loading Remote AES Encrypted PE in memory , Decrypted it and run it Usage : References : https://github.com/aplyc1a/PEMemoryLoader?fbclid=IwAR2-VAQo8pJU-tdbSENjhDBdDGi5tyzrnW1S3D9BPAYR6C6-RK4hsEDjDGk Requirements 1. hashlib 2. pycryptodome 3. pycryptodomex...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader is a fork of InlineExecute-Assembly to load .NET assembly and direct the output to mailslot. I rewrites it to a standalone loader with the following implementation: AES encryption payload Fileless payload support Patchless AMSI and ETW bypass using hardware...

TinkererShell

TinkererShell Un simple reverse shell escrito en Python 3.7 solo por diversión. En realidad soporta sistemas operativos Windows y Linux e integra algunas características básicas como keylogging y comunicaciones cifradas con AES. Sistemas operativos compatibles: Windows Linux OSX Funciones y...

CVE-2026-85147

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...

AVIator

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About ://name AV : AntiVirus Ator : Is a swordsman, alchemist, scientist, magician, scholar, and engineer, with the ability to sometimes produce objects out of thin air https://en.wikipedia.org/wiki/Ator About ://purpose AV|Ator is a backdoor...

EUVD-2026-70869

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...

CVE-2026-85147 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...

Rootsmart-v2.0

Rootsmart 2.0 con cve-2019-2215 + Ransomware Descargo de responsabilidad Este proyecto es únicamente con fines educativos. Este proyecto utiliza código de rkshrksh/2048-Game y kangtastic/cve-2019-2215. Descripción del proyecto Este proyecto es parte del módulo de Seguridad Móvil del Instituto de...

Lime-RAT

Outdated. Archive it instead of delete it LimeRAT v0.1.9 Remote Administration Tool For Windows Description Simple yet powerful RAT for Windows machines. This project is simple and easy to understand, It should give you a general knowledge about dotNET malwares and how it behaves. Main Features...

CVE-2025-59287

CVE-2025-59287 WSUS RCE Exploit Automated exploit for Windows Server Update Services WSUS unauthenticated remote code execution vulnerability. Vulnerability Details CVE ID: CVE-2025-59287 CVSS Score: 9.8 Critical Attack Vector: Network Authentication: None required Impact: Remote Code Execution a...

Malicious code in emoji-prints-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163576a0a8b626c88261c8cc54c5049d981015c80145ad36e2710fff5014afbe The package advertises itself as a colorized logger, but dist/index.js requires./logger, which at module load AES-256-CBC-decrypts a hardcoded...

ANT-2026-6FH6D5TF · supabase/supabase · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6FH6D5TF: Hardcoded Realtime tenant-credential encryption key with no override In docker/docker-compose.yml the...

CVE-2026-57262

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...

Malicious code in dateuuidv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15649ce278832166c0fc4b80206329a54347bf748b207c088308e72a31f72f1 The package advertises itself as a UUID v7 generator, but its main entry loads lib/bootstrap.js which unconditionally invokes extractDateISO at requi...