CVE-2023-26818

Disclaimer This exploit has been created solely for the purposes of research and for the development of effective defensive techniques. It is not intended to be used for any malicious or unauthorized activities. The author and the owner of the script disclaim any responsibility or liability for a...

AndroRAT

AndroRAT Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote Access Tool. It has been developed in a team of 4 for a university project. ...

CVE-2023-27035

CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Vulnerability type: Incorrect Access Control Description: An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the...

kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

kbd-audio

kbd-audio これは、オーディオデータのキャプチャと分析のためのコマンドラインツールおよびGUIツールのコレクションです。 Keytap 最も興味深いツールは keytap です。これは、コンピュータのマイクからキャプチャしたオーディオを解析するだけで、押されたキーボードのキーを推測できます。 詳細はこちらのブログ投稿をチェックしてください： Keytap: 説明といくつかの所感 ビデオ: Keytapの動作デモ オンラインで試す： Keytap2 keytap2...

android-c-sharp-rat-server

Android C R.A.T Server This is a pulgin built for the C R.A.T Server with the plugin system. 1. To install this plugin place the AndroidExtension.dll file from AndroidExtension/bin/Debug to /TutServer/bin/Debug/scripts 2. Then start the server and select the Plugins tab. 3. Select...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

Salamandra

Salamandra 间谍麦克风检测工具 Salamandra 是一款用于检测和 定位 封闭环境中间谍麦克风的工具。它根据麦克风发送信号的强度以及噪声和重叠频率的数量来发现麦克风。基于产生的噪声，它可以估计您与麦克风的距离远近。 安装 USB SDR 设备 要使用 Salamandra，您需要一个 SDR（软件定义无线电）设备。可以是任何便宜的 USB 设备，例如此设备。 rtlpower 软件 Salamandra 需要在您的计算机上安装 rtlpower 软件。要安装它，您可以执行以下操作： 在 MacOS 上： sudo port install rtl-sdr 如果您的 Mac...

Keylogger

Inputs To Mail. キーボード、マウス、スクリーンショット、マイク入力を取得し、あなたのメールに送信します。 このプロジェクトの目的は、情報システムのセキュリティをテストすることです。 インストール インストールのために何もする必要はありません。スクリプトを実行するだけです。 使用方法 •一時メールを使用して「https://mailtrap.io/」にアカウントを作成してください。 •「keylogger.py」に自分のSMTPユーザー名とSMTPパスワードを設定してください。 •pip install -r requirements.txt •python3...

Storm-Breaker

A Tool With Attractive Capabilities. Features: Obtain Device Information Without Any Permission ! Access Location SMARTPHONES Access Webcam Access Microphone Update Log: Second latest Update on November 4th , 2022 . The overall structure of the tool is programmed from the beginning and is availab...

wpair-app

WPair CVE-2025-36911（例: WhisperPair）脆弱性スキャナー＆研究ツール 特徴 • インストール • 使い方 • 動作の仕組み • 脆弱性 • クレジット 免責事項 このアプリケーションは @ZalexDev が個人の立場で作成した独自実装です。元の KU Leuven の研究者らはこの脆弱性を発見・開示しましたが、コードは一切公開しておらず、本プロジェクトとは関係ありません。クレジットへの記載は、彼らの研究貢献を称えることのみを目的としています。 概要 WPair は、Google の Fast Pair プロトコルにおける CVE-2025-36911...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fixed resource leaks during component removal The MBHC resources must be released in case of component probe failures and removals; therefore, they cannot be tied to the lifetime of the component device...

Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

Impact For serial-port and media camera / microphone permission checks made from an iframe, the requestingOrigin passed to session.setPermissionCheckHandler was the top-level frame's origin rather than the requesting frame's. Origin-based handler logic could therefore grant a cross-origin iframe...

About the security content of Beats Firmware Update 1B211

About the security content of Beats Firmware Update 1B211 This document describes the security content of Beats Firmware Update 1B211. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2026-12060

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

EUVD-2026-36390

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060

CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...

PT-2026-48831

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...