182 matches found
SigPloit
贡献者列表 Rosalia D'Alessandro Ilario Dal Grande SigPloit SigPloit 是一个信令安全测试框架，专为电信安全专业人士和研究人员设计，用于渗透测试和利用移动运营商使用的信令协议中的漏洞，无论当前使用的是哪一代网络。 SigPloit 旨在覆盖运营商互联中使用的所有协议：SS7、GTP（3G）、Diameter（4G），甚至包括接入层用于 IMS 和 VoLTE 基础设施的 SIP，以及 SS7 消息封装到 SIP-T 中。 针对每个漏洞将提供建议，指导测试人员和运营商采取必要步骤以增强其安全态势。 SigPloit 开发了多个版本。...
openhaystack
OpenHaystack OpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects keyrings, backpacks, ... or integrate it into other Bluetooth-capable devices such as notebooks...
telegram-nearby-map
Telegram Nearby Map Telegram Nearby Map 使用 OpenStreetMap 和官方 Telegram 库来查找附近用户的位置。 请注意： Telegram 的 API 已更新，使得附近用户的距离精度降低，无法精确计算位置。因此，Telegram Nearby Map 会显示附近用户，但不会展示其确切位置。 灵感来源于 Ahmed 的博文 和 Hacker News 的讨论。 由 github.com/tejado 开发。 工作原理？ 每 25 秒，通过 TDLib 从 Telegram...
DIY_WhisperPair
DIY-WhisperPair Implementación de referencia de CVE-2025-36911 y kit de verificación de vulnerabilidades IMPLEMENTACIÓN OFICIAL YA DISPONIBLE, gracias al equipo de KU Leuven Gracias por la mención AVISO LEGAL : Esta es una herramienta de investigación de seguridad. LeeLEGAL.md antes de usarla. El...
probequest
ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Kit de herramientas que permite capturar y mostrar las solicitudes de sonda probe requests Wi‑Fi que pasan cerca de su interfaz inalámbrica. Las solicitudes de sonda...
Tracgram
Trackgram Usa las funciones de ubicación de Instagram para rastrear una cuenta Uso At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: - NICKNAME: your...
I-See-You
I-See-You ISeeYou 是一个 Bash 和 Javascript 工具，用于在社会工程或钓鱼演练期间查找用户的精确位置。利用精确的位置坐标，攻击者可以进行初步侦察，从而有助于执行进一步的目标攻击。 注意： 此工具不需要任何额外软件即可执行钓鱼攻击。 用户可以将本地服务器暴露到互联网，并通过查看日志文件来解码位置坐标。 本项目不得用于非法目的，如跟踪他人或在未经许可的情况下入侵系统，它严格用于教育目的以及供人们进行实验。 欢迎对本工具提出任何建议或想法——只需在 Twitter 上找我 @ManiarViral 如何安装？ git clone...
EggShell
EggShell Acerca de EggShell es una herramienta de vigilancia post-explotación escrita en Python. Te proporciona una sesión de línea de comandos con funcionalidades adicionales entre tú y la máquina objetivo. EggShell te brinda la potencia y comodidad de subir/descargar archivos, autocompletado co...
Android-Passive-Location-Tracker
Android-Passive-Location-Tracker Location tracking app without explicitly asking any location permissions! Makes use of CVE-2018-15835 which makes use of Android OS information leakage through broadcasting intents...
whisper-pair
Escáner de Vulnerabilidades de Fast Pair Herramienta de investigación de seguridad para detectar accesorios Bluetooth vulnerables a ataques WhisperPair 🌐 Investigación WhisperPair • 📦 Instalación • 🚀 Uso • 🔬 Detalles Técnicos ⚠️ Aviso Legal Esta herramienta es únicamente para pruebas de seguridad...
New ZeroDayRAT Malware Claims Full Monitoring of Android and iOS Devices
Meet ZeroDayRAT, a newly advertised malware targeting Android and iOS devices with surveillance, location tracking, and crypto theft tools sold via Telegram as a MaaS service...
A week in security (February 2 – February 8)
Last week on Malwarebytes Labs: Apple Pay phish uses fake support calls to steal payment details Open the wrong "PDF" and attackers gain remote access to your PC Flock cameras shared license plate data without permission Grok continues producing sexualized images after promised fixes Firefox is...
Exploit for CVE-2025-36911
WhisperPair Exploit Toolkit CVE-2025-36911 !Python 3.8+...
WhisperPair exposes Bluetooth earbuds and headphones to tracking and eavesdropping
WhisperPair is a set of attacks that lets an attacker hijack many popular Bluetooth audio accessories that use Google Fast Pair and, in some cases, even track their location via Google’s Find Hub network—all without requiring any user interaction. Researchers at the Belgian University of Leuven...
EUVD-2021-12412
Malware in sbrugna...
Security and Privacy Analysis of Tile's Location Tracking Protocol
We conduct the first comprehensive security analysis of Tile, the second most popular crowd-sourced location-tracking service behind Apple's AirTags. We identify several exploitable vulnerabilities and design flaws, disproving many of the platform's claimed security and privacy guarantees: Tile's...
CVE-2025-32347: Improper Export of Android Application Components
In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
China Accuses Nvidia of Putting Backdoors into Their Chips
The government of China has accused Nvidia of inserting a backdoor into their H20 chips: China's cyber regulator on Thursday said it had held a meeting with Nvidia over what it called "serious security issues" with the company's artificial intelligence chips. It said US AI experts had "revealed...
Location Tracking App for Foreigners in Moscow
Russia is proposing a rule that all foreigners in Moscow install a tracking app on their phones. Using a mobile application that all foreigners will have to install on their smartphones, the Russian state will receive the following information: Residence location Fingerprint Face photograph...
