scansploit

=SCANSPLOIT= 用于将恶意载荷注入条形码的工具 条形码 code128 QR码 DataMatrix EAN13 依赖 Python3 PyStrich pip3 install pystrich 如果出现jpeg错误： sudo apt-get install libtiff5-dev zlib1g-dev libfreetype6-dev liblcms2-dev libwebp-dev tcl8.6-dev tk8.6-dev python-tk Pillow pip3 install pillow...

Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution

CVE-2023-38831 反向Shell演示 此仓库包含一份PDF总结和基于实验室环境演示CVE-2023-38831的截图。该漏洞允许攻击者在压缩文件中嵌入并执行恶意载荷。在本例中，载荷触发一个反向shell。 内容包含： summaryreport.pdf：实验室过程的详细说明 /screenshots：步骤和结果的视觉验证 注意： 此仓库不 包含任何可执行代码或恶意软件。 所有操作均在隔离环境中出于教育目的执行。...

CVE-2020-15916

EN GenLANConfigAttack - es un PoC para explotar CVE-2020-15916 , una vulnerabilidad que permite cambios no autorizados en la configuración LAN de un dispositivo. Características Explota la vulnerabilidad de configuración LAN Envía un payload malicioso para alterar la configuración de red Evita lo...

godofwar

GodOfWar - Constructor de WAR maliciosas en Java Una herramienta de línea de comandos para generar payloads WAR para pruebas de penetración / equipos rojos, escrita en Ruby. root@kitploit: . hhh hhhhhhh hhhhhhhh hhhhhhhh+ hhhhhhhh' hhhhhhhh. hhhhhhhhh ..-- hhhhhhhhh -sh/.. +. hhhhhhhhh: /+/:-/+ss...

CVE-2023-48022

CVE-2023-48022 CVE-2023-48022 exploit modified from Bishop Fox work How to use set ip and port in jobs.py set payload in malicious.py $ pip install ray $ python3 jobs.py...

CVE-2024-32002

CVE-2024-32002 RCE PoC 概述 此仓库包含 CVE-2024-32002 的概念验证（PoC），这是一个 Git 子模块中的远程代码执行（RCE）漏洞。该漏洞利用演示了如何通过递归克隆 Git 仓库来触发恶意载荷。 仓库设置 在运行 PoC 之前，请在你的远程 Git 服务器上创建以下仓库，你也可以根据需要更改名称： hulk.git submod.git smash.git 如果你更改了名称，请相应更新 PoC 脚本中的仓库路径。 漏洞利用详情 该漏洞利用通过 Git 子模块在递归克隆仓库时在目标系统上执行载荷。此 PoC 已在 macOS 上测试。 定义仓库路径...

CVE-2024-32002

CVE-2024-32002 RCE PoC 概述 此仓库包含 CVE-2024-32002 的概念验证（PoC），这是 Git 子模块中的一个远程代码执行（RCE）漏洞。该漏洞演示了如何通过递归克隆 Git 仓库来触发恶意负载。 仓库设置 在运行 PoC 之前，请在您的远程 Git 服务器上创建以下仓库，或根据需要更改名称： hulk.git submod.git smash.git 如果更改了名称，请相应更新 PoC 脚本中的仓库路径。 漏洞详情 该漏洞利用 Git 子模块，在递归克隆仓库时，于目标系统上执行负载。此 PoC 已在 macOS 上测试。 定义仓库路径...

Malicious code in array-frames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9461945c1bccc858c52f79e13624b33fb8cdfc37c889de48907b8464779063 The npm package [email protected] advertises a trivial array chunking utility but ships an obfuscator.io-wrapped payload as its main module. On...

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

Astra Linux – Vulnerability in Thunderbird

The Thunderbird Address Book’s URI fields contained unsanitized links. Attackers could use these links to create and export an address book containing malicious payloads in certain fields. For example, in the “Other” field of the Instant Messaging section. If another user imported the address boo...

Astra Linux – Vulnerability in http-parser

HTTP request smuggling in Node.js versions 10, 12, and 13 causes the delivery of malicious payloads when transfer-encoding is malformed...

RUSTSEC-2026-0265 `proc-macro1` was removed from crates.io due to malicious code

It was reported proc-macro1 contained a build script that would download a malicious payload. This crate had two versions, both published on 2026-08-20. The crate was removed from crates.io and related user accounts were locked. This crate was used as part of a malware campaign targeted at users ...

`proc-macro1` was removed from crates.io due to malicious code

It was reported proc-macro1 contained a build script that would download a malicious payload. This crate had two versions, both published on 2026-08-20. The crate was removed from crates.io and related user accounts were locked. This crate was used as part of a malware campaign targeted at users ...

Malicious code in ranux-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2844c37c95371d0fa96d0a814be948335590d5b65500a8f4b2a577c8748e23 The package main index.js is obfuscator.io-transformed with a rotated string-array decoder and, at top level, uses createDecipheriv with a hardcoded...

CVE-2026-68772 ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted...

CVE-2026-68772

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted...

Malicious code in tailwindcss-hide-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac906893a6ea1562025bfa35bf4f1998cfd745619f21c4dc3880aa386dc3cfe1 dist/index.js exports a small tailwind scrollbar-hide plugin followed by a trailing evalatob'' that executes on every require/import of the package...

MAL-2026-12817 Malicious code in beaver-ui-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f257786868c5d56c3f9f79e674980d07bfad3a42194819837623614554abb77 On require'beaver-ui-list', index.js loads ext.js, which selects a payload path based on OS and architecture, downloads a native binary from hardcode...

Malicious code in @zahlen/checkout-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fa3b05e748470cdc08e19b2e86efb8a34c85f155e5972c1b0c0598c150a0bd The package's fesm2022 ESM entry declared as module in package.json and executed on import of the library ends with a trailing evalatob'...' payload...

Malicious code in checkout-common-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0e9681cb5e7a197ca8d77ba29e20a4709fa0ff476f2ffb02f935785c6633e0 On require, index.js loads ext.js which selects a platform-specific payload URL from a rotating list of Cloudflare Workers subdomains hosts assembled...