cve-2025-59287

CVE-2025-59287 - WSUS Exploitation Toolkit by adel-h4x0a ⚠️ For Educational and Authorized Testing Purposes Only ⚠️ Overview This toolkit demonstrates the exploitation of CVE-2025-59287, a remote code execution vulnerability in Windows Server Update Services WSUS. Components 1. Encryption Module...

laZzzy

laZzzy laZzzy 是一个 shellcode 加载器，演示了恶意软件常用的多种执行技术。laZzzy 使用了不同的开源仅头文件库开发而成。 功能特点 直接系统调用和原生（Nt）函数（并非全部，但大部分） 导入地址表（IAT）规避 加密载荷（XOR 和 AES） 随机生成的密钥 使用时自动用 NOP（\x90）填充（必要时） 内存中逐字节解密载荷 XOR 加密的字符串 PPID 欺骗 阻止非微软签名的 DLL 加载 （可选）克隆 PE 图标和属性 （可选）使用伪造证书进行代码签名 使用方法 环境要求： 安装了 Visual Studio 及其以下组件的 Windows 机器（可从...

GG-AESY

博客文章：https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ 警告：你可能需要还原NuGet包并重启Visual Studio才能编译。如果有人知道如何解决这个问题，请私信我。 手册 首先， 我强烈建议始终使用GG-AESY的详细模式或非常详细模式。如果你不使用非托管加载器，我也建议始终指定输出文件（outfile）。 不过请注意，在非常详细模式下，特别是当你要隐藏大型有效载荷时，该模式会将字节数组打印到控制台。 话虽如此，让我们深入了解这个工具的手册。 root@kitploit: . / | / | / \ | | /...

sdc

root@kitploit: +------------------------------------------------------------------------------+ SDC - Generatore di Binary Auto-Decifranti Copyright C 2006 Claes M Nyberg +------------------------------------------------------------------------------+ -= Cos'è questo root@kitploit: Il programma S...

DotNET_XorCryptor

DotNET XorCryptor आप एक पुराने प्रोजेक्ट पर भी ध्यान दे सकते हैं - NET-MalwareCryptor यह एक .NET एक्ज़ीक्यूटेबल पैकर है जिसमें पेलोड एन्क्रिप्शन होता है। केवल शैक्षिक उद्देश्यों के लिए उपयोग करें। कैसे उपयोग करें? --file path - फ़ाइल नाम निर्दिष्ट करें --flood - फ़ाइल में जंक क्लास जोड़ें --proxy...

ByteCaster

ByteCaster Coltellino svizzero per la cifratura di payload, l'offuscamento e la conversione in array di byte, il tutto con un unico comando! Supporta 3 algoritmi di cifratura, 4 algoritmi di encoding / offuscamento e 14 formati di output. Installazione Scarica il binario compilato oppure compila ...

CVE-2026-31431-exp

Basierend auf https://github.com/theori-io/copy-fail-CVE-2026-31431 adaptiert. Es wurden Funktionen wie Payload-Verschlüsselung und -Verschleierung, Cache-Rückschreiben zur Verbesserung der Systemstabilität, adaptive Chunks, 0 Abhängigkeiten, Multi-Architektur-Unterstützung x86, arm, i386 usw...

pycrypt

pycrypt Crypter basato su Python che può bypassare qualsiasi tipo di prodotto antivirus Nota: root@kitploit: Se lo stub viene rilevato, utilizza le seguenti offuscazioni:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Importante: root@kitploit: 1...

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra. According to a new analysis by Proofpoint, Cruciferra has bee...

DEBIAN-CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

FTP Fetch, Reverse TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...

FTP Fetch, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Listen for a connection Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

MiracleLinux 9 : delve-1.21.2-2.el9, golang-1.21.9-2.el9 (AXSA:2024-7759:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7759:01 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 golang: net/http: memory exhaustion in...

CVE-2025-34433

AVideo 14.3.1–20.0.x isaffected by an unauthenticated RCE due to insecure salt generation: installation salt is created with PHP uniqid(), and the installation timestamp plus a derived hashId are exposed publicly, enabling offline brute-forcing of the remaining entropy to recover the salt. Attack...

Exploit for Out-of-bounds Write in Mediatek Software_Development_Kit

What is Registry Exploit? Phantom-Registry-Exploit-Cve2025-20...

CVE-2020-25493

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic...

Writing a BugSleep C2 server and detecting its traffic with Snort

In June 2024, security researchers published their analysis of a novel implant dubbed "MuddyRot"aka "BugSleep". This remote access tool RAT gives operators reverse shell and file input/output I/O capabilities on a victim's endpoint using a bespoke command and control C2 protocol. This blog will...

RHEL 9 : runc (RHSA-2024:4762)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4762 advisory. The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes:...

Important: Red Hat Security Advisory: skopeo security update

An update for skopeo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...