chimera

Rust-based DLL hijacking loader for MobaXterm CVE-2026-6421 with persistence...

Chimera

Chimera Hardware Emulation & Proximity Exploitation Why Hak5 gear is heavy and obvious. My phone has a full Linux kernel in it, so I made it do the same job — HID emulation, RNDIS, mass storage, the whole thing — straight through ConfigFS. No extra hardware. No cables dangling out of a bag. Plug...

chimera

Chimera Sandbox untrusted code with safe access to the host. Chimera is a userspace sandbox for code you don't fully trust — a natural fit for coding agents that run arbitrary, generated commands on a machine they share with you. It confines what a process can do to the host while still letting i...

Chimera

Chimera Unlea$ed Tool Background While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a program to function, it can also be used for malicious purposes. Attackers can use DLL sideloading to execute arbitrary code on a target system, often by exploitin...

Chimera

Chimera는 번쩍이고 매우 해킹적인 PowerShell 난독화 스크립트로, AMSI 및 안티바이러스 솔루션을 우회하도록 설계되었습니다. AV를 트리거하는 것으로 알려진 악성 PS1을 처리하고 일반적인 탐지 서명을 회피하기 위해 문자열 대체 및 변수 연결을 사용합니다. Chimera는 이 글을 위해 만들어졌으며, 탐지 서명을 우회하는 것이 얼마나 사소한 일인지에 대한 추가 증거입니다. 이 저장소가 누군가가 강력하고 더 안정적인 무언가를 구축하도록 영감을 주기를 바랍니다. Chimera 작동 방식... 아래는...

CVE-2021-40444--CABless

CVE-2021-40444--CABless 버전 업데이트: CAB 아카이브에 의존할 필요가 없도록 코드를 수정했습니다 페이로드 실행을 트리거하는 "index.html" 파일에는 'script' 태그 안에 코드 한 줄만 포함됩니다: PDF 형식의 문서가 제공됩니다. 업데이트: 비디오 데모 링크 - https://www.youtube.com/watch?v=V9XD3VboEcU 참고: 샘플 RAR 파일에는 GitHub에 게시된 PoC 중 하나를 참조로 사용했기 때문에 취약점을 악용하도록 설계된 Word 문서가 포함되어 있지 않습니다...

EUVD-2006-0144

Malware in sbrugna...

EUVD-2018-20543

Malware in sbrugna...

EUVD-2018-20542

Malware in sbrugna...

EUVD-2006-0145

Malware in sbrugna...

Malicious code in chimera-dom (npm)

The package chimera-dom was found to contain malicious code...

MAL-2025-16984 Malicious code in chimera-dom (npm)

The package chimera-dom was found to contain malicious code...

Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulation

Insider threats, which can lead to severe losses, remain a major security concern. While machine learning-based insider threat detection ITD methods have shown promising results, their progress is hindered by the scarcity of high-quality data. Enterprise data is sensitive and rarely accessible,...

PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download additional payloads. The packages in question are listed below - eslint-config-airbnb-compat 676 Downloads ts-runtime-compat-check 1,588...

Malicious code in chimera-sandbox-extensions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9b87170278a2bed3680592ca4efa2d402a56ee044fcfea4b95831e545431a794 When started, the code attempts to access multiple domains based on the generating algorithm. Once one valid is found, it downloads a script and executes it. T...

MAL-2025-191701 Malicious code in chimera-sandbox-extensions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9b87170278a2bed3680592ca4efa2d402a56ee044fcfea4b95831e545431a794 When started, the code attempts to access multiple domains based on the generating algorithm. Once one valid is found, it downloads a script and executes it. T...

SUSE CVE-2018-8935

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW...

SUSE CVE-2018-8934

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW...

Malicious Package

Overview chimera-dom is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Invoke-Stealth - Simple And Powerful PowerShell Script Obfuscator

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux...