pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

Grok-backdoor

Grok-backdoor Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the C&C communication. Ngrok-backdoor can generate Windows, Linux and Mac binaries using Pyinstaller. How it works: Ngrok exposes local servers behind NATs and firewalls to the public internet over a secure...

PyInstallerPrivEsc

PyInstallerPrivEsc Exploit for PyInstaller CVE-2019-16784 Article coming soon...

fudcrypt

fudcrypt Python3 Based Obfuscator That Can bypass any antivirus easily. Important: 1. Make Sure your payload file have all the libraries import and it will be a valid payload file 2. If Your Payload get detected then let me know i will update the stub. 3. If u need cobalt strike evasions then DM ...

CVE-2019-16784-POC

CVE-2019-16784 POC This is my POC for the Windows PyInstaller version 3.6 vulnerability that exists for the --onefile option. An attacker could achieve command execution and possible LPE by hijacking a DLL imported by the python interpreter DLL used by the pyinstaller binary. A short explanation ...

meterssh

Tool Name: MeterSSH Written by: David Kennedy Company: TrustedSec Website: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH...

Ares

Ares Ares is a Python Remote Access Tool. Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don't support nor can be held responsible for. Ares is made of two main programs: A Command aNd Control server, which...

PythonAESObfuscate

PythonAESObfuscate Pythonic way to load shellcode. Builds an EXE for you too! Usage Place a payload.bin raw shellcode file in the same directory. Default Architecture is x86 run python obfuscate.py Default output is out.py Requirements Windows Python 2.7 Pyinstaller PyCrypto PyCryptodome didn't...

python-exe-unpacker

Author: In Ming Loh [email protected] - @tantaryu Company: Countercept @countercept Website: https://www.countercept.com Introduction A script that helps researcher to unpack and decompile executable written in python. However, right now this only supports executable created with py2exe and...

de4py v3.3.2-stable

de4py ⚠️ de4py is FREE & OPEN SOURCE CC BY-NC 4.0. Any paid versions sold elsewhere or commercial use are NOT permitted. If you paid for de4py, you were misled. De4py is an advanced Python deobfuscator with a beautiful UI PySide6 and a robust set of features for malware analysts and reverse...

MAL-2026-10756 Malicious code in darkglitch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e3bc2b0ee4fc1f401e9d810e9ae30ee45ae822962099291c502e355f4bdcc7 darkglitch ships a remote-access agent that connects to the hardcoded signaling host wss://malware-signal.vercel.app on room D4RKGLI7CH and executes...

Malicious Package

Overview albion-x-x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package attempts to impersonate legitimate gaming utilities, bots, or performance panels, it is entirely malicious and has no connection to t...

systembridgebackend (3.4.10.dev1), systembridgecli (3.4.10.dev1) +1 more potentially affected by CVE-2025-59042 via pyinstaller (5.6.1)

pyinstaller PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - systembridgebackend 3.4.10.dev1 - systembridgecli 3.4.10.dev1 - systembridgegui 3.4.10.dev1 Source cves: CVE-2025-59042 Source advisory:...

pyupdater (>=1.1.14, <=1.1.15) potentially affected by CVE-2025-59042 via pyinstaller (3.1.1)

pyinstaller PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - pyupdater =1.1.14, =1.1.15 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

media-organizer (>=1.1.0, <=1.1.1), ofscraper (>=3.6.0, <=3.6.9) +1 more potentially affected by CVE-2025-59042 via pyinstaller (5.13.1)

pyinstaller PYPI version 5.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - media-organizer =1.1.0, =3.6.0, =3.6.9 - tribler 7.13.1 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

bin-maker (3.1.0), checksec-py (>=0.3.6, <=0.3.8) +3 more potentially affected by CVE-2025-59042 via pyinstaller (4.0.0)

pyinstaller PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - bin-maker 3.1.0 - checksec-py =0.3.6, =1.2.2, =1.8.2 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

PyInstaller has local privilege escalation vulnerability

ImpactDue to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for bytecode decryption while this entry is still present in sys.path, an application built with...

cluseek (1.0.0), systembridgebackend (>=3.4.7, <=3.4.8) +2 more potentially affected by CVE-2025-59042 via pyinstaller (5.4.1)

pyinstaller PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - cluseek 1.0.0 - systembridgebackend =3.4.7, =3.4.7, =3.4.7, =3.4.8 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...

dalineunit (>=0.0.35, <=0.0.69), deepl-tr-async (>=0.0.2, <=0.0.5) +9 more potentially affected by CVE-2025-59042 via pyinstaller (3.6.0)

pyinstaller PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - dalineunit =0.0.35, =0.0.2, =0.2.0, =0.1.0, =0.4.4, =0.1.5, =0.1.0, =0.1.1 - xtl-read-assistant 0.0.2 Source cves: CVE-2025-59042 Source...

gitlabform (1.14.3), muser (1.0.0) potentially affected by CVE-2025-59042 via pyinstaller (3.5.0)

pyinstaller PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - gitlabform 1.14.3 - muser 1.0.0 Source cves: CVE-2025-59042 Source advisory: OSV:PYSEC-2026-1813...