laZzzy

laZzzy laZzzy è un loader di shellcode che dimostra diverse tecniche di esecuzione comunemente utilizzate dal malware. laZzzy è stato sviluppato utilizzando diverse librerie header-only open-source. Caratteristiche Syscall dirette e funzioni native Nt non tutte, ma la maggior parte Evasione della...

CVE-2026-31431-exp

Basierend auf https://github.com/theori-io/copy-fail-CVE-2026-31431 adaptiert. Es wurden Funktionen wie Payload-Verschlüsselung und -Verschleierung, Cache-Rückschreiben zur Verbesserung der Systemstabilität, adaptive Chunks, 0 Abhängigkeiten, Multi-Architektur-Unterstützung x86, arm, i386 usw...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ ATTENZIONE: potresti dover ripristinare i pacchetti NuGet e riavviare Visual Studio prima di compilare. Se qualcuno sa come risolvere questo problema, mi contatti in privato. Manuale Per cominciare, consiglio vivamente di usare...

DotNET_XorCryptor

DotNET XorCryptor Puoi anche dare un'occhiata a un progetto più vecchio - NET-MalwareCryptor Questo è un packer per eseguibili .NET con crittografia del payload. Usalo solo per scopi educativi. Come si usa? --file path - specifica il nome del file --flood - aggiungi classi spazzatura al file...

cve-2025-59287

CVE-2025-59287 - WSUS-Exploitation-Toolkit von adel-h4x0a ⚠️ Nur für Bildungs- und autorisierte Testzwecke ⚠️ Überblick Dieses Toolkit demonstriert die Ausnutzung von CVE-2025-59287, einer Remotecodeausführung-Schwachstelle in Windows Server Update Services WSUS. Komponenten 1...

pycrypt

pycrypt Crypter basato su Python che può bypassare qualsiasi tipo di prodotto antivirus Nota: root@kitploit: Se lo stub viene rilevato, utilizza le seguenti offuscazioni:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Importante: root@kitploit: 1...

sdc

root@kitploit: +------------------------------------------------------------------------------+ SDC - مولد الثنائي ذاتي الفك تشفير حقوق الطبع والنشر C 2006 كلاس إم نيبيرغ +------------------------------------------------------------------------------+ -= ما هذا root@kitploit: يقوم برنامج SDC بإنش...

ByteCaster

ByteCaster Coltellino svizzero per la cifratura di payload, l'offuscamento e la conversione in array di byte, il tutto con un unico comando! Supporta 3 algoritmi di cifratura, 4 algoritmi di encoding / offuscamento e 14 formati di output. Installazione Scarica il binario compilato oppure compila ...

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra. According to a new analysis by Proofpoint, Cruciferra has bee...

DEBIAN-CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

FTP Fetch, Reverse TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...

FTP Fetch, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Listen for a connection Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

MiracleLinux 9 : delve-1.21.2-2.el9, golang-1.21.9-2.el9 (AXSA:2024-7759:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7759:01 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 golang: net/http: memory exhaustion in...

CVE-2025-34433

AVideo 14.3.1–20.0.x isaffected by an unauthenticated RCE due to insecure salt generation: installation salt is created with PHP uniqid(), and the installation timestamp plus a derived hashId are exposed publicly, enabling offline brute-forcing of the remaining entropy to recover the salt. Attack...

Exploit for Out-of-bounds Write in Mediatek Software_Development_Kit

What is Registry Exploit? Phantom-Registry-Exploit-Cve2025-20...

CVE-2020-25493

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic...

Writing a BugSleep C2 server and detecting its traffic with Snort

In June 2024, security researchers published their analysis of a novel implant dubbed "MuddyRot"aka "BugSleep". This remote access tool RAT gives operators reverse shell and file input/output I/O capabilities on a victim's endpoint using a bespoke command and control C2 protocol. This blog will...

RHEL 9 : runc (RHSA-2024:4762)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4762 advisory. The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes:...

Important: Red Hat Security Advisory: skopeo security update

An update for skopeo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...