hades

Über Hades ist ein Proof-of-Concept-Lader, der verschiedene Umgehungstechniken kombiniert, um die von modernen AV/EDRs üblicherweise verwendeten Verteidigungsmechanismen zu umgehen. Verwendung Der einfachste Weg ist wahrscheinlich, das Projekt unter Linux mit make zu bauen. root@kitploit: git clo...

Rusty-Playground

Rusty-Playground 🦀 Uma coleção de programas Rust demonstrando algumas técnicas ofensivas de segurança e evasão Tool| Description| References ---|---|--- ClipboardMon| Monitora a área de transferência para alterações e registra o conteúdo da área de transferência ou copia arquivos dependendo das...

RedPeanut

RedPeanut root@kitploit: oooooooooooooooooo ooooooooooooooooooooooooooooooooooooooo ooooooooooooooooooooooooooooooooo ooooooooooooooooooooooooooooooooooooooooooo oooooooooooooooooooooooooooo oooooooooooooooooooooooooooooooooooooo RedPeanutv0.3.0@b4rtik Wird derzeit getestet. Bekannte Modulproblem...

Awesome-WAF

Awesome WAF वेब एप्लीकेशन फ़ायरवॉल WAF के बारे में सब कुछ, एक सुरक्षा दृष्टिकोण से। 🔥 प्रस्तावना: यह मूलतः WAF पर मेरा अपना संग्रह था। मैं इसे इस उम्मीद में ओपन-सोर्स कर रहा हूँ कि यह पेंटेस्टर्स और शोधकर्ताओं के लिए उपयोगी होगा। जैसा कि कहावत है, "समुदाय एक-दूसरे से सीखता है।" एक संक्षिप्त...

BlackSnufkin

🎯 프로필 개요 드디어 제 Github 프로필을 발견하셨군요. 더 나은 점이 있다고 생각되면 프로젝트를 클론/포크하고, 이슈를 제기하고, PR을 제출해 주세요. write-up과 연구 자료는 제 블로그에서 확인하세요 - Happy Hacking! 😊 root@kitploit: struct OffensiveOperator handle: String, role: String, specialties: Vec, baseofoperations: String, primarylanguages: Vec, impl OffensiveOperat...

isr-sqlget

-- ISR - Infobyte Security Research -- | ISR-sqlget | www.infobytesec.com | ..:: विवरण ISR-sqlget: यह Perl में विकसित एक ब्लाइंड SQL इंजेक्शन उपकरण है। यह आपको डेटाबेस स्कीमा और तालिका पंक्तियाँ प्राप्त करने की अनुमति देता है। एक एकल GET/POST का उपयोग करके आप चुपचाप डेटाबेस संरचना तक पहुँच सकते...

hades

About Hades is a proof of concept loader that combines several evasion technques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs. Usage The easiest way, is probably building the project on Linux using make. root@kitploit: git clone https://github.com/f1zm0/hades...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

Awesome_Malware_Techniques

Awesome Malware-Techniken Eine kuratierte Liste von Ressourcen zur Analyse und Untersuchung von Malware-Techniken. Unprotect: Unprotect ist eine offene Datenbank für Malware-Evasion-Techniken, die Code-Snippets und Erkennungsregeln bereitstellt. LolBas: Living Off The Land Binaries, Scripts and...

MAL-2026-13301 Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20a9180ff2928b0498496b59c96983db044063b8db7c5e258b6518d5daf00a On require of this package, index.js loads bridge.js which downloads a platform-specific binary from hardcoded Cloudflare Workers hosts...

Malicious code in dolyame-boxy-desktop-bnpl-hero-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036c11daa7712014748d57bc2bca8a37672acffa8f3eaca83161b726ba473fdb On require of the package, helpers.js reassembles hostnames from split string arrays e.g. 'oob-worker.cf102-baf.workers.dev',...

Malicious code in dolyame-boxy-independent-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1752274e08bd28f5be07afaa71cafeea1e7822330016892d0f06abd6c50681 On require of the package, index.js loads vendor.js which downloads a platform-specific binary from a string-concatenation-obfuscated list of...

MAL-2026-12750 Malicious code in devplatform-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72866f0f03d8960696f4e272cbff49b861cc66557c5250a7d77f90a2310f33c On require'devplatform-sdk', index.js loads polyfill.js which auto-invokes start: it selects a per-OS payload path, fetches a binary from...

Malicious code in devplatform-spa-plugin-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9000b7892808e2b10e702cb2b6f91fc672ad1bc0f58dfdc4c9cf2aa97edff896 On require of the package's main entry, support.js runs an init routine that assembles destination hosts from split string fragments...

MAL-2026-12764 Malicious code in devplatform-spa-plugin-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9000b7892808e2b10e702cb2b6f91fc672ad1bc0f58dfdc4c9cf2aa97edff896 On require of the package's main entry, support.js runs an init routine that assembles destination hosts from split string fragments...

MAL-2026-12346 Malicious code in cardsmobile-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103c6f5e66de4d466d79c8a4247f46670fad0de2601a93f37fa6280c5491cc41 On require of the package,./runtime.js runs a top-level setup that downloads a platform-specific binary from string-concatenated hostnames...

MAL-2026-12303 Malicious code in twork-mf-e2e-nitro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eba320ce2333e7bd477470ded20a2be52a334069c482ab957b41772f347f63d On require of the package, index.js loads compat.js which reconstructs Cloudflare workers.dev hostnames via split-string array concatenation...

MAL-2026-12046 Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d969f292b82b34df445017d86910903f577428c88bd312736ef2c03f9381e4f On require of the package's main entry, compat.js runs as a side effect: it selects a per-platform payload, fetches a native binary over HTTPS from o...

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra. According to a new analysis by Proofpoint, Cruciferra has bee...

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader , Lorem Ipsum Loader , and Potemkin , per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, observed in April...