AndroRAT

AndroRAT Android 远程管理工具 Androrat 是一个客户端/服务器应用程序，客户端使用 Java Android 开发，服务器使用 Java/Swing 开发。 Androrat 这个名字是 Android 和 RAT（远程访问工具）的组合。 它由四人团队为大学项目开发，耗时一个月。该应用程序的目标是远程控制 Android 系统并从中获取信息。 技术要点 Android 应用程序是客户端，服务器接收所有连接。 Android 应用程序作为服务（而非活动）运行，在启动时启动。因此用户无需与服务交互（尽管有一个调试活动允许配置连接的 IP 和端口）。...

traccar

Traccar 概述 Traccar 是一个开源的 GPS 跟踪系统。本仓库包含基于 Java 的后端服务。它支持超过 200 种 GPS 协议以及超过 2000 种型号的 GPS 跟踪设备。Traccar 可以与任何主流 SQL 数据库系统配合使用。它还提供了易于使用的 REST API。 Traccar 解决方案的其他组成部分包括： Traccar web app Traccar Manager app 此外，还有一组可用于跟踪移动设备的移动应用： Traccar Client app 功能 部分可用功能包括： 实时 GPS 跟踪 驾驶员行为监控 详细与汇总报告 地理围栏功能 报警与...

airo-heat

airoheat T1GR3$ チームのリポジトリ、Cybercamp 2018 ハッカソン Cybercamp 2018 での最終プレゼンテーション: https://www.youtube.com/watch?v=l-iBtYxHAbQ Cybercamp 2018 で使用されたビデオ: https://www.youtube.com/watch?v=0DEitQNn7GQ Aircrack-ng インストールの変更 sudo apt-get install build-essential autoconf automake libtool pkg-config libnl-3-de...

CVE-2024-24809-Proof-of-concept

CVE-2024-24809 详情 描述 Traccar 是一个开源 GPS 跟踪系统。6.0 之前的版本存在路径遍历和危险类型文件无限制上传漏洞。由于系统默认允许注册，攻击者可以通过注册账户获取普通用户权限，并利用此漏洞在任意文件夹下上传以 device. 为前缀的文件。攻击者可利用此漏洞进行钓鱼、跨站脚本攻击，并可能在服务器上执行任意命令。版本 6.0 包含针对此问题的补丁。 使用 root@kitploit: Fofa 查询 : app="traccar" root@kitploit: nuclei --target target.com -t CVE-2024-24809.yam...

CamPhish

CamPhish 標的のスマートフォンのフロントカメラやPCのウェブカムから、リンクを送信するだけでカムショットを取得します。 CamPhishとは？ CamPhishは、標的のスマートフォンのフロントカメラやPCのウェブカムからカムショットを取得するテクニックです。CamPhishは内蔵のPHPサーバー上に偽のウェブサイトをホストし、ngrokとCloudFlare Tunnelを使用してリンクを生成します。そのリンクを標的に送信することで、インターネット経由で利用できます。ウェブサイトはカメラの許可を求め、標的が許可すると、このツールは標的のデバイスからカムショットを取得します。...

Traccar - Unrestricted File Upload

Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this...

EUVD-2018-21645

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25192

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25192

GPS Tracking System 2.12 is vulnerable to SQL injection via the username parameter in login.php, allowing unauthenticated bypass of authentication. The underlying issue is a SQL injection in the login flow, enabling attackers to gain unauthorized access without valid credentials. Reported impact ...

CVE-2018-25192 GPS Tracking System 2.12 SQL Injection via username Parameter

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25192 GPS Tracking System 2.12 SQL Injection via username Parameter

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

PT-2026-23702

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft

Cybersecurity researchers have disclosed details of a new mobile spyware platform dubbed ZeroDayRAT that's being advertised on Telegram as a way to grab sensitive data and facilitate real-time surveillance on Android and iOS devices. "The developer runs dedicated channels for sales, customer...

EUVD-2020-26460

Malware in sbrugna...

EUVD-2025-2572

Malicious code in bioql PyPI...

EUVD-2021-8656

Malicious code in bioql PyPI...

EUVD-2023-55488

Malicious code in bioql PyPI...

CVE-2025-21615

AAT Another Activity Tracker is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device...

CVE-2020-5246

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances wit...

CVE-2025-21615

AAT Another Activity Tracker is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device...