wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

APTSimulator

APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...

wifi-passview

WiFi Passview WiFi Passview 是一个开源的基于批处理脚本的程序，可在几秒钟内轻松恢复你的 WiFi 密码。仅适用于 Windows 操作系统。基本上，这个脚本化程序与其他密码查看软件（如 webpassview 和 mailpassview）功能相同。 免责声明 ：WiFi Passview 并非 为恶意用途而设计！请负责任地使用本程序！ 💖 特色推荐 该项目已被一些流行的网络安全网站和 Facebook 页面推荐，例如 KitPloit.com v2 /KitPloit.com v4 、Hakin9.org 、Pentest Magazine 、Malware...

CVE-2023-38831

Coloque el archivo señuelo y el archivo de script malicioso en el directorio actual; se recomienda que el archivo señuelo sea una imagen .png, jpg o un documento .pdf 2. Ejecute python gen-CVE2023-38831.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar para generar su exploit...

CVE-2023-38831-WinRAR-Exploit

CVE-2023-38831-WinRAR-Exploit WinRAR漏洞（CVE-2023-38831）的概念验证（PoC）利用程序 用法： python poc.py 示例： python poc.py cutepicture.jpg exploit.bat output.rar PoC视频：https://youtu.be/TRe0eGIsB5k...

log4j-fix-CVE-2021-44228

log4j-fix-CVE-2021-44228 Windows 批处理脚本，用于扫描所有本地驱动器并修复受 log4jCVE-2021-44228 影响的 jar 文件 以下配置需要设置才能正常工作 SET ZIPPATH =C:\PROGRA1\7-Zip\7z.exe set RESULTFILENAM E=log4jimpactedjars set APPLYFIX =FALSE set LOG4JLOGDIR =%temp% ZIPPATH 应指向 7Zip 可执行文件 APPLYFIX TRUE - 扫描并修复所有 jar 文件 FALSE - 扫描并将所有受影响的 jar...

CVE-2023-38831

CVE-2023-38831 winrar 漏洞利用 6.22 = 快速 PoC root@kitploit: git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc 使用示例 root@kitploit: python3 simplefile.txt script.bat output.zip 使用示例 https://www.youtube.com/watch?v=-mN4tTKaMhQ...

winrar-cve-2023-38831-poc-gen

Generador de Exploits CVE-2023-38831 Esta herramienta es un script de Python que explota una vulnerabilidad en el formato de archivo RAR CVE-2023-38831 para ejecutar un comando malicioso cuando un usuario abre un archivo señuelo. El exploit funciona en versiones de WinRAR anteriores a la 6.23. Po...

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527 Script batch simple para deshabilitar el servicio de Microsoft Print Spooler del sistema Ejecutar 1. Abra el Símbolo del sistema con privilegios elevados; se requieren privilegios de administrador para deshabilitar el servicio. 2. Ejecute el...

cve-2022-29464

cve-2022-29464 cve-2022-29464 批量脚本 参考了MzzdToT师傅的exp，编写的cve-2022-29464 批量检测脚本 python3 rce.py -f file.txt...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR Este documento describe el propósito y el funcionamiento básico del script de adquisición FLAIR. Propósito Durante la investigación de incidentes en el entorno de los clientes, hay ocasiones en las que no hay un EDR desplegado del que e...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat CGIServlet enableCmdLineArguments RCE Windows batch script injection via query string arguments Description Apache Tomcat with the CGI servlet enabled and enableCmdLineArguments=true passes query string parameters as command-line arguments to CGI scripts. On Windows,...

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spain, and Türkiye between late September 2025 and early April 2026. These campaigns, per Recorded Future Insikt Group, have led to the deployment of a previously...

Exploit for Command Injection in Microsoft

CVE-2025-54100-BYPASS- CVE-2025-54100 POC "simple" Bypass Patc...

CVE-2026-27115 ADB Explorer is Vulnerable to Arbitrary Directory Deletion via Command-Line Argument

ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below have an unvalidated command-line argument that allows any user to trigger recursive deletion of arbitrary directories on the Windows filesystem. ADB Explorer accepts an optional path argument to set a custom data...

AudioCodes Fax Server 安全漏洞

AudioCodes Fax Server is a fax server from AudioCodes Israel. A security vulnerability exists in AudioCodes Fax Server version 2.6.23 and prior versions, which originates from a writable batch script that could lead to local elevation of privilege...

EUVD-2018-0652

Malware in sbrugna...

APTSimulator

This is a toolset for simulating an APT Advanced Persistent Threat attack on a Windows system. The tool, called APT Simulator, is a Windows Batch script that uses a set of tools and output files to make a system look as if it was compromised. It is designed to be simple and easy to use, requiring...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-6218 Proof of Concept POC Overview This reposit...

Malicious code in pydefender (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a1e2cc2d94eff74e302118c35c34f87e76175fe507facbe21c29883960c8223e setup.py is prepared to download and run an obfuscated batch script. While the script is not detected by any AV currently, in the sandbox analysis it reveals...