MAL-2026-12033 Malicious code in aedes_clusters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0750fab7cca2996255b57d6fa98107b2d6b710fc8ab62f30345158ff3b7560 The package's package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects host reconnaissance...

Malicious code in aedes_clusters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0750fab7cca2996255b57d6fa98107b2d6b710fc8ab62f30345158ff3b7560 The package's package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects host reconnaissance...

MAL-2026-12039 Malicious code in data-format-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21db9b8662eac789b1523c3f2114daa6a5fd3a2a0c7bbfb58fafdf3b4809c7cd The package advertises itself as a data-formatting utility but ships a postinstall.js that auto-executes on npm install and runs shell commands to...

MAL-2026-11531 Malicious code in @zzzgenesis00/hdkey-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9f452c698c4accd69ca2df75854aae3189ecf3dddafc4b62d86403ca3d911f On npm install, scripts.postinstall executes postinstall.js which harvests installer-side secrets and host reconnaissance and transmits them to...

Malicious code in simple-date-formatter-util-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fc695a31f735a6d7603ba7938ea65bb907620d8bee07dd8f93af372623c4df On npm install, package.json's postinstall hook launches a detached bash reverse shell over /dev/tcp to 124.221.154.135:4444, giving remote interacti...

s3dns v0.2.24

S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...

nerva v1.57.1

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

ONVIF Events Probe

Query ONVIF Events GetEventProperties and extract topic hints. Uses an ONVIF session or rhost. !/usr/bin/env python3 -- coding: utf-8 -- """Probe ONVIF Events service GetEventProperties / topic list.""" from kittysploit import from lib.protocols.onvif.session import OnvifSessionMixin import json...

ONVIF Media Streams

List ONVIF media profiles and resolve GetSnapshotUri + GetStreamUri RTSP for RTSP handoff. Uses an ONVIF session or rhost. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate ONVIF media profiles, snapshot URIs, and RTSP stream URIs.""" from kittysploit import from lib.protocols.onvif.session...

OpenWrt / BusyBox Firmware Info

Collect firmware/board identity from an embedded Linux shell: openwrtrelease, board name, uname, and common version files. !/usr/bin/env python3 -- coding: utf-8 -- """Gather OpenWrt / embedded firmware identity from a BusyBox-style shell.""" from kittysploit import from lib.post.linux.session...

Matter device inventory

Full Matter node inventory from DNS-SD TXT vendor/product, device type, commissioning window, discriminator with optional JSON export. !/usr/bin/env python3 -- coding: utf-8 -- """Matter device inventory dump JSON via session or target.""" from kittysploit import from lib.protocols.matter.client...

ONVIF Snapshot Grab

Authenticate to ONVIF Media service, resolve GetSnapshotUri for the first profile, and download a JPEG snapshot. Prefers an ONVIF session. !/usr/bin/env python3 -- coding: utf-8 -- """Fetch an ONVIF snapshot JPEG via GetSnapshotUri.""" from kittysploit import from lib.protocols.onvif.session impo...

CoAP Observe Dump

Register RFC 7641 Observe on a resource and collect notifications for a duration ACK CON notifications, then deregister. !/usr/bin/env python3 -- coding: utf-8 -- """Collect CoAP Observe notifications for a resource over a time window.""" from kittysploit import from lib.protocols.coap.client...

IEC 61850 MMS directory dump

MMS Identify plus GetNameList for domains and named variables session preferred. !/usr/bin/env python3 -- coding: utf-8 -- """IEC 61850 MMS directory dump — Identify + GetNameList domains/variables.""" from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...

MQTT Broker Audit

Audit an MQTT broker from a session or rhost: anonymous access, $SYS exposure, retained messages, and rough ACL signals. !/usr/bin/env python3 -- coding: utf-8 -- """Audit MQTT broker exposure: anonymous auth, $SYS, retained, ACL signals.""" from kittysploit import from lib.post.mqtt.session impo...

OpenWrt / BusyBox Network Recon

Enumerate interfaces, routes, ARP/neighbors, DNS, and listening sockets on an embedded Linux shell for LAN/WAN pivot planning. !/usr/bin/env python3 -- coding: utf-8 -- """Network / pivot recon for OpenWrt / BusyBox shells.""" from kittysploit import from lib.post.linux.session import...

ONVIF Device Information

Query an IP camera ONVIF device service for manufacturer/model/firmware and Media service XAddr. Prefers an ONVIF session when set. !/usr/bin/env python3 -- coding: utf-8 -- """ONVIF device information gather HTTP SOAP.""" from kittysploit import from lib.protocols.onvif.session import...

ONVIF PTZ Status

Query ONVIF PTZ GetStatus for a media profile pan/tilt/zoom. Uses an ONVIF session or rhost. !/usr/bin/env python3 -- coding: utf-8 -- """Read ONVIF PTZ status for the first or selected media profile.""" from kittysploit import from lib.protocols.onvif.session import OnvifSessionMixin import json...

RTSP describe dump

OPTIONS + DESCRIBE against an RTSP URL/session and dump SDP media tracks !/usr/bin/env python3 -- coding: utf-8 -- """RTSP DESCRIBE dump — SDP media inventory via session or URL.""" from kittysploit import from lib.protocols.rtsp.client import RTSPPORT, probertsp from lib.protocols.rtsp.session...

mDNS / DNS-SD Enum

Enumerates DNS-SD instances via unicast or multicast mDNS, resolves PTR→SRV/TXT/A, and suggests KittySploit protocol sessions. !/usr/bin/env python3 -- coding: utf-8 -- """Deep mDNS / DNS-SD enumeration with SRV/TXT/A correlation and module handoff.""" from kittysploit import from...