GitBackdorizer

GitBackdorizer BETA GitBackdorizer is a proof of concept, fully inspired in Ulisses Castro's 50 ton of backdoors talk, that abuses the lack of user attention to steal git access credentials. How it Works GitBackdorizer consists of three pieces: handler, dropper and the payload. Handler The handle...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...

bt2

bt2: Herramientas de Puerta Trasera de Telegram Blaze bt2 es una puerta trasera basada en Python en forma de un bot de mensajería instantánea que utiliza la infraestructura y la API de bot rica en funciones proporcionada por Telegram, reutilizando ligeramente su plataforma de comunicación para...

CVE-2011-2523

CVE-2011-2523 Exploit para la vulnerabilidad de puerta trasera de vsFTPd escrito en Python usando Pwntools Uso root@kitploit: pip3 install pwntools python3 ./CVE-2011-2523.py optional...

sccm_sql_backdoor

sccmsqlbackdoor Una herramienta de prueba de concepto que implanta un backdoor controlado en un procedimiento almacenado de Management Point, permitiendo la ejecución indirecta de SQL a través de un servicio HTTP legítimo de MP. Instalación Puedes instalarlo clonando el repositorio e instalando l...

backdoor-learning-resources

Backdoor Learning Resources This Github repository summarizes a list of Backdoor Learning resources. For more details and the categorization criteria, please refer to our survey. We will try our best to continuously maintain this Github Repository in a monthly manner. Why Backdoor Learning?...

backdoor.mirai.helloworld

Al agregar una cadena después de '? image' en la URL del router Dasan GPON...

XZ-Utils_CVE-2024-3094

Resumen de la vulnerabilidad XZ es un formato de compresión de datos que está presente en casi todas las distribuciones de Linux. liblzma es una biblioteca de software de código abierto que maneja el formato de compresión XZ. El 29 de marzo, los desarrolladores descubrieron un ataque a la cadena ...

UACME

UACMe Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. This project demonstrates various UAC bypass techniques and serves as an educational resource for understanding Windows security mechanisms. ⚠️ Warning : This tool demonstrates security vulnerabilities...

APTs-Adversary-Simulation

APTs Adversary Simulation A comprehensive collection of simulated Advanced Persistent Threat APT attacks based on real world tactics, techniques, and procedures TTPs used by state sponsored APT Groups from Russia, China, Iran, and North Korea !CAUTION Important Notice : This project is strictly f...

blackvue-cve-2023

BlackVue DR750 CVEs + more The below is for educational purposes only, do not try this on any device you do not own or have permission to use. As of writing, there are about 300 vulnerable BlackVue devices online, which can easily be discovered and exploited, and no official patch is out. BlackVu...

hiphp

🚨 New Build Available! WebHole now supports all major web languages. Check it out on GitHub: WebHole on GitHub Hiphp Free & Open Source project for creating a backdoor to control PHP-based websites. ✓ Command Line Interface CLI. ✓ Graphical User Interface GUI. ✓ Web Application. ✓ Python Package....

EvilAbigail

Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...

Python-Rootkit

python-rootkit This is a full undetectable python RAT which can bypass almost all antivirus and open a backdoor inside any windows machine which will establish a reverse https Metasploit connection to your listening machine. ViRu5 life cycle Bypass all anti-virus. Inject a malicius powershell...

KitHack

Kithack is a framework designed to automate the process of downloading and installing different tools for penetration testing, with a special option that allows generating cross-platform backdoors using Metasploit Framework. KitHack Compatible Distributions: Installation: root@kitploit: Update yo...

xzk8s

xzk8s Dockerfile and Kubernetes manifests for reproduce CVE-2024-3094 Build image We use the debian version of the vulnerable xz utils as the base image. We also need to patch the library. The patched version of the liblzma library is taken from the xzbot repository. root@kitploit: FROM...

Exploit-CVE-2011-2523

README : Exploit para VSFTP 2.3.4 Este script de Python está diseñado para explotar una vulnerabilidad de puerta trasera presente en VSFTP versión 2.3.4. El exploit otorga acceso no autorizado al sistema que ejecuta esta versión específica de VSFTP. Uso Para usar este script de exploit, sigue est...

power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...

FTP-vsFTPD-CVE-2011-2523-VAPT-Report

vsFTPD CVE-2011-2523 VAPT REPORT Target: Metasploitable 2 Tester: Security Analyst Date: 24th June 2026 Scope: Internal Lab Testing Kali Linux → Metasploitable 2 📌Executive Summary A vulnerability scanning was performed using Nmap vulnerability scanning script against the Metasploitable 2 machine...

PortBender

Overview PortBender is a TCP port redirection utility that allows a red team operator to redirect inbound traffic destined for one TCP port e.g., 445/TCP to another TCP port e.g., 8445/TCP. PortBender includes an aggressor script that operators can leverage to integrate the tool with Cobalt Strik...