Grok-backdoor

Grok-backdoor Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the C&C communication. Ngrok-backdoor can generate Windows, Linux and Mac binaries using Pyinstaller. How it works: Ngrok exposes local servers behind NATs and firewalls to the public internet over a secure...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

shells

Shellz A script for generating common revshells fast and easy. Especially nice when in need of PowerShell and Python revshells, which can be a PITA getting correctly formatted. PowerShell revshells Shows [email protected], above the prompt and working-directory Has a partial and full...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

CamPhish

CamPhish Grab cam shots from target's phone front camera or PC webcam just sending a link. What is CamPhish? CamPhish is techniques to take cam shots of target's phone front camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & CloudFlare Tunnel to generate a...

MaccaroniC2

MaccaroniC2 - Empowering Command & Control using AsyncSSH MaccaroniC2 is a proof-of-concept Command and Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Configuración de Docker Ngrok CVE-2018-11235-Git PoC y tunelización con docker ngrok Construir Dockerfile $ docker build -t cve-2018-11235 . Crear red personalizada para ngrok $ docker network create myngroknet Iniciar Servidor Git Http $ docker run -d -p 8080:80...

CVE-2026-64638

Requisito Node .js Comando node evilngrok.js...

malvinci

malvinci Este sencillo script introducirá un nuevo tipo de malware que desactivará el firewall, iniciará un servidor HTTP, reenviará su puerto a través de ngrok y enviará la URL del servidor a través de un bot de Telegram. Necesitarás crear un nuevo BOT de Telegram. Sigue los pasos aquí para crea...

lockphish

Lockphish v2.0 Lockphish是首个（2020年4月7日）针对锁屏的钓鱼攻击工具，旨在使用HTTPS链接获取Windows凭证、Android PIN和iPhone密码。 LockPhish教程：https://www.kalilinux.in/2020/05/lockphish.html 作者：The Linux Choice（已删除其GitHub仓库） 推特：https://twitter.com/linuxchoice 功能： 用于Windows、Android和iPhone的锁屏钓鱼页面 自动检测设备 通过Ngrok进行端口转发 IP追踪器 法律免责声明：...

ivanti_shell

CVE-2024-21887 利用与 Ngrok 反向 Shell 本仓库提供了一个 Python 脚本，旨在演示利用 Ivanti Connect Secure 网关中的 CVE-2024-21887 漏洞。它使用 Ngrok 建立反向 Shell，仅用于教育和道德测试目的。 免责声明 所提供的工具和脚本仅用于教育和道德测试。未经明确许可，禁止在系统上进行未经授权的测试、利用或使用本脚本，这种行为是严格禁止且可能违法的。在执行任何安全评估前，请务必获得许可。 先决条件 开始之前，请确保具备以下条件： 系统中安装了 Python 3.x。 拥有 Ngrok 账号并已安装...

malvinci

malvinci Dieses einfache Skript stellt eine neue Art von Malware vor, die die Firewall deaktiviert, einen HTTP-Server startet, ihren Port über ngrok weiterleitet und die URL des Servers über einen Telegram-Bot sendet. Du musst einen neuen Telegram-BOT erstellen. Folge den Schritten hier, um einen...

Malicious code in env-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faefbcd9110b5e08b469d72d6541875ba4e2702c4490d1a24c37b313160f86b env-local presents itself as a dotenv-compatible.env loader README, keywords, and API mirror motdotla/dotenv, but lib/main.js unconditionally require...

Malicious code in numpyp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ce16c4710dfddc439c30ec2fc190001171f79fcd66f718ad358a43ecdf876 Package name numpyp is a one-character edit of numpy top-1 PyPI package and PKG-INFO advertises it as 'the simplest module for quick work with files'...

Exploit for Deserialization of Untrusted Data in Snakeyaml_Project Snakeyaml

yaml-payload A SnakeYAML deserialization exploit payload for...

Malicious code in kuaishou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1d5daf09cc7bfff164e60bf5abd0a1b374b5bb616f0a78cac8f6c6ea613608 The package's prepare lifecycle script, which runs automatically on npm install, collects host, user, and platform identifiers along with the full...

MAL-2026-10416 Malicious code in kuaishou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1d5daf09cc7bfff164e60bf5abd0a1b374b5bb616f0a78cac8f6c6ea613608 The package's prepare lifecycle script, which runs automatically on npm install, collects host, user, and platform identifiers along with the full...

Malicious code in nonenull1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...