WebView2-Cookie-Stealer

블로그 포스트 자세한 내용은 이 블로그 포스트를 읽어주세요. 소스 코드 이 코드는 Microsoft의 WebView2 코드의 수정된 버전입니다. 현재 코드는 정리하고 더 좋게 만들 수 있습니다. 데모 실행 예제 사용 예제 사용법 Windows 10 및 11에서 테스트 완료. 바이너리가 실행되면 https://office.com/login이 로드됩니다. JavaScript 키로거가 모든 페이지에 주입되고 키 입력이 http://127.0.0.1:8080로 전송됩니다. 또한 사용자가 성공적으로 인증하면...

chromecookiestealer

Chrome 쿠키 도용기 및 주입기 Chrome의 원격 DevTools 프로토콜을 사용하여 Chrome에 연결하고 쿠키를 도용/주입/삭제/제거합니다. 다음에 크게 영감을 받았습니다: WhiteChocolateMacademiaNut. 쿠키는 Chrome 자체 형식을 사용하여 JSON 객체로 덤프됩니다. 로드할 쿠키에도 동일한 형식이 사용됩니다. 합법적인 용도로만 사용하십시오. 기능 Chrome의 쿠키 덤프 덤프된 쿠키를 다른 인스턴스의 Chrome에 주입 Chrome의 쿠키 삭제 컴파일 시 기본값 설정 가능 빠른 시작 피해자의 ...

BrainDamage

BrainDamage Python 기반 원격 관리 도구로, Telegram을 C&C 서버로 사용합니다. root@kitploit: /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | 제작: Mehul Jain -- Windows 전용 | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ || |,||,|| ||/ -- 지속성 -- USB 확산 -- 포트 스캐너 -- 라우터 찾기 -- 셸 명령 실행 -- 키...

Radium

root@kitploit: | \ | | | | | | | | | | | | | | | // |/ | | | | | ' \ | |/ / \ | | | |/ \ / |/ |/ \ '| | | \ \ | | | | | || | | | | | | | 제작: Mehul Jain -- Windows 전용 | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ || |,||,|| ||/ -- 애플리케이션 및 키 입력 로깅 -- 스크린샷 로깅 -- 드라이브 트리...

Exploit for CVE-2012-0053

This repository is an offensive tool for web application exploitation, specifically for cross-site scripting XSS attacks. It contains a collection of payloads and scripts that can be used to exploit vulnerabilities in web applications. The payloads are designed to be injected into a vulnerable we...

MS15-018 Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "MS15-018 Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection", 'Description' = %q This module exploits a universal cross-site...

Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack

Cybersecurity researchers have flagged multiple in-the-wild exploit campaigns that leveraged now-patched flaws in Apple Safari and Google Chrome browsers to infect mobile users with information-stealing malware. "These campaigns delivered n-day exploits for which patches were available, but would...

FICO Origination Manager Decision Module 4.8.1 XSS / Session Hijacking Vulnerabilities

Multiple persistent cross site scripting vulnerabilities in FICO Origination Manager Decision Module version 4.8.1 allow an attacker to execute code in the context of the victim's browser using a crafted payload. Additionally, an attacker with initial access to the application, can get the...

Judge.me : stored XSS on AliExpress Review Importer/Products when delete product

Hi @judgeme! code Step to reproduce: 1. Go to Shopify admin and create product with name "" img src=x onerror=prompt 2. Go to AliExpress Review Importer/Products and delete our product with name " img src=x onerror=promptdocument.domain F1544890 3. Xss work= P.S. Poc wideo attach F1544893 Impact...

Judge.me : Stored XSS in Question edit from product name

Hi @judgeme! Step to reproduce: 1. Log in to your shopify account and create product with name "img src=x onerror=prompt 2. Go to our store and write question to our product with name "img src=x onerror=prompt 3. Then go to Shopify admin/Judge.me Product Reviews/Questions and edit question. XSS...

Google details cookie stealer malware campaign targeting YouTubers

By Waqas Google attributed the malware campaign to a group of attackers recruited via a Russian-language hacker forum. This is a post from HackRead.com Read the original post: Google details cookie stealer malware campaign targeting YouTubers...

CopperStealer Malware Targets Facebook and Instagram Business Accounts

A malware that until now has gone undocumented has been quietly hijacking online accounts of advertisers and users of Facebook, Apple, Amazon, Google and other web giants since July 2019 and then using them for nefarious activity, researchers have found. Dubbed CopperStealer, the malware acts...

BrainDamage - A fully featured backdoor that uses Telegram as a C&C server

A python based backdoor which uses Telegram as C&C server. /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Coded by: Mehul [email protected] -- Github: https://github.com/mehulj94 -- Twitter: https://twitter.com/wayfarermj -- For windows only | | | | | | | | | / / | | | | | '/ / |...

Fully Featured Backdoor – Telegram C&C: BrainDamage

A python based backdoor which uses Telegram as C&C server. Features Persistance USB spreading Port Scanner Router Finder Run shell commands Keylogger Insert keystrokes Record audio Webserver Screenshot logging Download files in the host Execute shutdown, restart, logoff, lock Send drive tree...

Radium-Keylogger - Python keylogger with multiple features

Python keylogger with multiple features. Features Applications and keystrokes logging Screenshot logging Drive tree structure Logs sending by email Password Recovery for Chrome Mozilla Filezilla Core FTP CyberDuck FTPNavigator WinSCP Outlook Putty Skype Generic Network Cookie stealer Keylogger st...

Python Keylogger: Radium

Python Keylogger With Multiple Features Keystroke logging, often referred to as keylogging or keyboard capturing, is the action of recording logging the keys struck on a keyboard, typically covertly, so that the person using the keyboard is unaware that their actions are being monitored. Keyloggi...

Cookies Manager - Simple Cookie Stealer

A simple program in PHP to help with XSS vulnerability in this program are the following: + Cookie Stealer with TinyURL Generator + Can you see the cookies that brings back a page + Can create cookies with information they want + Hidden to login to enter Panel use ?poraca to find the login A vide...

leap cms 0.1.4 (sql/xss/su) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

LinkBase 2.0 - Remote Cookie Grabber Vulnerability

No description provided by source. + Download LinkBase 2.0 Cookie Grabber Exploit + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Greetz : All my friends + Make 2 files and upload to your host : stealer.php - Put the following code into the file : ?php $cookie = $GET'cookie'; $lo...

Simple Machines Forum <= 1.1.7 '[url]' Tag HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33595/info Simple Machines Forum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML...