demiguise

Demiguise - outil de chiffrement HTA Publié en open source par NCC Group Plc - http://www.nccgroup.trust/ Développé par Richard Warren, richard point warren at nccgroup point trust http://www.github.com/nccgroup/demiguise Publié sous licence AGPL, voir LICENSE pour plus d'informations Qu'est-ce q...

SharpShooter

root@kitploit: / // / / // / / / \ / / / / \ / / / / / / / / / / / / // / / / // // / / / / // / // / // / / /// //,// / ./// /////// // Описание SharpShooter — это фреймворк для создания полезных нагрузок, предназначенный для получения и выполнения произвольного CSharp-кода...

EmbedInHTML

Intégrer et cacher n'importe quel fichier dans du HTML ============ Auteur : Arno0x0x - @Arno0x0x Ce que fait cet outil est de prendre un fichier n'importe quel type de fichier, le chiffrer, et l'intégrer dans un fichier HTML en tant que ressource, avec une routine de téléchargement automatique...

MsfMania

MsfMania MsfMania est un framework avancé d'obfuscation de payloads basé sur Python, conçu pour contourner la détection EDR/AV sur les systèmes Windows. Il génère des exécutables hautement polymorphes grâce à la génération dynamique de code, au chiffrement multicouche RC4 et à l'usurpation de...

Mistica

Mística --- Logo Mística par JoelGMSec Mística est un outil qui permet d'incorporer des données dans les champs de protocoles de la couche application, dans le but d'établir un canal bidirectionnel pour des communications arbitraires. Actuellement, l'encapsulation dans les protocoles HTTP, HTTPS,...

ShellGhost

ShellGhost Une technique d'évasion basée sur la mémoire qui rend le shellcode invisible du début à la fin du processus. Motivation Je souhaitais partager cette POC d'auto-injection de shellcode pour présenter certains concepts d'évasion AV/EDR qui pourraient s'avérer utiles pour le Red Teaming. I...

demiguise

Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...

cart

CaRT 압축 및 RC4 전송 CaRT 파일 형식은 악성코드 및 관련 메타데이터를 저장/전송하는 데 사용됩니다. 악성코드를 실행할 수 없도록 무력화하고 암호화하여 안티바이러스 소프트웨어가 CaRT 파일을 악성코드로 탐지하지 못하게 합니다. 장점 빠름FAST: CaRT는 파일을 압축하는 것만큼 빠릅니다. 스트리밍STREAMING: CaRT는 zlib 및 RC4를 사용하므로 파일을 스트리밍 방식으로 인코딩할 수 있습니다. 메타데이터METADATA: CaRT는 파일 자체와 동일한 파일에 파일 메타데이터를 저장할 수 있으며, 전체 파...

EmbedPayloadInPng

EmbedPayloadInPng PNG 파일 내에 페이로드를 여러 IDAT 섹션에 분산하여 삽입합니다. 각 섹션은 RC4 암호화 알고리즘을 사용하여 고유한 16바이트 키로 개별적으로 암호화됩니다. 빠른 링크 Maldev Academy 홈 Maldev Academy 강의 계획서 Maldev Academy 가격 구현 이 저장소는 두 가지 구현으로 구성되어 있습니다: EmbedPayloadInPng.py - 입력된 페이로드를 지정된 PNG 파일에 삽입하는 Python 스크립트. FetchPayloadFromPng -...

Cronos

Cronos Este projeto foi coautorado por Descrição PoC para uma nova técnica de ofuscação de sleep baseada no Ekko que utiliza waitable timers para criptografar o processo atual com RC4 e alterar as permissões de RW para RX a fim de evadir scanners de memória. Uma explicação mais detalhada estará...

Christmas

Maldev Academy Maldev Academy Home Maldev Academy Syllabus Christmas Implementazione di un metodo di injection menzionato da @Hexacorn. Questa PoC crea più processi, ognuno dei quali esegue un compito specifico come parte dell'operazione di injection. Ogni processo figlio genera un altro processo...

ThunderShell

ThunderShell ThunderShell è un RAT in C che comunica tramite richieste HTTP. Tutto il traffico di rete è crittografato utilizzando un secondo livello di RC4 per evitare l'intercettazione SSL e sconfiggere il rilevamento di rete sul sistema di destinazione. RC4 è un cifrario debole e viene...

Ivy

QUESTO REPOSITORY È STATO ARCHIVIATO Per visualizzare l'ultima versione di Ivy o per segnalare un problema, fare riferimento a https://github.com/Tylous/Ivy. Ulteriori Informazioni Se vuoi saperne di più sulle tecniche utilizzate in questo framework e sulle misure difensive per proteggerti, dai...

Malicious code in webautomation_js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854e679284d7396f5ac4f7248839fa3704a2c72bcec08c100267b5980cd2a0d5 index.js is packed with an obfuscator.io RC4 string-array plus self-defending debugger-check wrapper. The only exported function appends a...

CVE-2026-22093

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

CVE-2026-22093

CVE-2026-22093 affects EVbee Service app (v1.4.101.00). The issue arises because the Android app performs TLS/HTTPS communication but does not validate the server certificate, enabling a man‑in‑the‑middle attacker on the network path to intercept and manipulate traffic. Additionally, the app is d...

CVE-2026-22093 Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

The EVbee Service Android app uses TLS encrypted communication HTTPS, but does not validate the certificate provided by the server. This allows an attacker on the network path between the app and EVbee server to intercept and manipulate the communication between the app and server. The traffic is...

FTP Fetch, Windows x64 Command Shell, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x64 payload from an FTP server. Spawn a piped command shell Windows x64 staged. Connect back to the attacker Module Options...

FTP Fetch, Reverse TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...

FTP Fetch, Windows Upload/Execute, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Listen for a connection Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...