cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Configuração do Docker Ngrok PoC do CVE-2018-11235-Git e tunelamento com docker ngrok Construir o Dockerfile root@kitploit: $ docker build -t cve-2018-11235 . Criar rede personalizada para ngrok root@kitploit: $ docker network create myngroknet Iniciar o servidor...

lockphish

Lockphish v2.0 Lockphish è il primo strumento 07/04/2020 per attacchi di phishing sulla schermata di blocco, progettato per rubare credenziali Windows, PIN Android e Passcode iPhone utilizzando un link https. Tutorial LockPhish: https://www.kalilinux.in/2020/05/lockphish.html Autore: The Linux...

shells

Shellz Uno script per generare rapidamente e facilmente le comuni revshell. Particolarmente utile quando servono revshell PowerShell e Python, che possono essere un vero incubo da formattare correttamente. Revshell PowerShell Mostra [email protected], sopra il prompt e la directory di...

browser-crash-tool

Ferramenta de Crash de Navegador - Kali Visão Geral Esta ferramenta explora uma vulnerabilidade no WebKit do iOS CVE-2020-27950 usando o módulo auxiliar webkitbackdropfilterblur do Metasploit. Mas parece funcionar em todos os navegadores após alguns testes — ela derruba o navegador de destino ao...

Grok-backdoor

Grok-backdoor Grok-backdoor è un semplice backdoor basato su Python, utilizza il tunnel Ngrok per la comunicazione C&C. Ngrok-backdoor può generare binari per Windows, Linux e Mac usando Pyinstaller. Come funziona: Ngrok espone server locali dietro NAT e firewall a Internet pubblico tramite un...

CamPhish

CamPhish Cattura foto dalla fotocamera frontale del telefono del target o dalla webcam del PC semplicemente inviando un link. Cos'è CamPhish? CamPhish è una tecnica per scattare foto dalla fotocamera frontale del telefono del target o dalla webcam del PC. CamPhish ospita un sito falso su un serve...

ivanti_shell

CVE-2024-21887 का Ngrok रिवर्स शेल के साथ शोषण यह रिपॉजिटरी एक Python स्क्रिप्ट प्रदान करता है जो Ivanti Connect Secure गेटवेज़ में CVE-2024-21887 भेद्यता के शोषण को प्रदर्शित करने के लिए डिज़ाइन किया गया है। यह शैक्षिक और नैतिक परीक्षण उद्देश्यों के लिए एक रिवर्स शेल स्थापित करने के लिए Ngrok का...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

MaccaroniC2

MaccaroniC2 - AsyncSSH का उपयोग करके कमांड और कंट्रोल को सशक्त बनाना MaccaroniC2 एक प्रूफ-ऑफ-कॉन्सेप्ट कमांड और कंट्रोल फ्रेमवर्क है जो शक्तिशाली AsyncSSH पायथन लाइब्रेरी का उपयोग करता है, जो SSHv2 प्रोटोकॉल का एक एसिंक्रोनस क्लाइंट और सर्वर कार्यान्वयन प्रदान करती है और PyNgrok रैपर का उपयोग ngr...

CVE-2026-64638

Voraussetzung Node .js Befehl node evilngrok.js...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

malvinci

malvinci Dieses einfache Skript stellt eine neue Art von Malware vor, die die Firewall deaktiviert, einen HTTP-Server startet, ihren Port über ngrok weiterleitet und die URL des Servers über einen Telegram-Bot sendet. Du musst einen neuen Telegram-BOT erstellen. Folge den Schritten hier, um einen...

Malicious code in env-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faefbcd9110b5e08b469d72d6541875ba4e2702c4490d1a24c37b313160f86b env-local presents itself as a dotenv-compatible.env loader README, keywords, and API mirror motdotla/dotenv, but lib/main.js unconditionally require...

Malicious code in numpyp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ce16c4710dfddc439c30ec2fc190001171f79fcd66f718ad358a43ecdf876 Package name numpyp is a one-character edit of numpy top-1 PyPI package and PKG-INFO advertises it as 'the simplest module for quick work with files'...

Malicious code in kuaishou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1d5daf09cc7bfff164e60bf5abd0a1b374b5bb616f0a78cac8f6c6ea613608 The package's prepare lifecycle script, which runs automatically on npm install, collects host, user, and platform identifiers along with the full...

MAL-2026-10416 Malicious code in kuaishou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1d5daf09cc7bfff164e60bf5abd0a1b374b5bb616f0a78cac8f6c6ea613608 The package's prepare lifecycle script, which runs automatically on npm install, collects host, user, and platform identifiers along with the full...

Malicious code in nonenull1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...

MAL-2026-10090 Malicious code in nonenull1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...

MAL-2026-7024 Malicious code in none123s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28e7ef260830adb9561488c487960b12e00bd6939daf8ed8e3a239ec9530699 package.json declares a prepare lifecycle script node index.js || true that auto-executes on npm install. index.js reads canonical installer-secret...