KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

covert-tube

covert-tube 通过上传视频到Youtube来远程控制系统的一个程序，使用Python创建视频和监听端，模拟了我读到的一些恶意软件。它允许创建由简单文本、明文二维码或使用AES加密的二维码组成的帧的视频。 注意：此PoC已添加到框架 covert-control 中，该框架还允许通过OneDrive、Google Drive和Telegram实现相同的功能。 如果你的目标是Windows系统，你可能更喜欢C版本：SharpCovertTube（我最近更新了更多）。 创建视频 可以使用 generatevideo.py 创建视频：输入命令并输入"exit"以生成视频。生成的视频默认...

AmzWord

AmzWord 一个基于CVE-2022-30190，163邮箱后门，以及图片隐写的自动化攻击链实现。 感谢以下github仓库，我们参考并修改了部分代码，集成实现了我们的工作： gdog follina virtual-reality 需求 gdog： Python 2.7 PyCrypto module WMI module Enum34 module Netifaces module follina： Python 3.x 使用&攻击流程 1. 利用follina.py构建恶意word文件，并打开http监听 您可以更改代码中的默认名字和默认ip...

CVE-2022-4096

CVE 2022 -4096 Amine TITROFINE | 2023年1月21日 本实验旨在演示DNS重绑定攻击如何在模拟的IoT设备上工作。 在设置中，我们有一个模拟的IoT设备，可通过Web界面进行控制（这在许多IoT设备中很典型）。 许多IoT设备没有强大的保护机制，如果攻击者能够直接与其交互，他们很容易攻陷这些设备。 环境 主机： - 此漏洞已在（Linux kali 6.0.0-kali5-amd64 ）上实验过，也可以在（Ubuntu ）发行版上测试 漏洞利用 容器命令与设置 首先，将该项目克隆到本地机器上 $ git clone...

reinschauer

Reinschauer Un PoC para controlar remotamente máquinas Windows a través de Websockets. Echa un vistazo a mi blog para un análisis detallado. Se puede ejecutar como exe de Go, exe de .NET/C y en memoria usando BOF.NET y Cobaltstrike. El tráfico se puede tunelizar a través de una conexión Beacon...

CVE-2017-12617

开始使用 此概念验证（Proof Of Concept）旨在演示如何利用 CVE-2017-12617 对 Apache Tomcat 服务器进行远程控制。 操作说明 1. 请执行以下命令以启动服务器。 make serverup 2. 执行以下命令以发起攻击并在服务器上上传一个 webshell（需要安装 cURL）。 make attack 如果此命令未自动打开您的浏览器，您可以访问： http://localhost:8080/webshell.jsp?cmd=pwd 现在您将能在浏览器中直接访问服务器上的 webshell。 常见问题 如果您在运行此概念验证时遇到任何问题，请在...

SocialFishMobile

SocialFish Mobile This app is an open-source project to remote control SocialFish, it does not work independently. How to build Prepare your Flutter environment Go to https://flutter.dev/docs/get-started/install After configured go ahead Clone this repository $ git clone...

Idisagree

Idisagree v1.0 Control remote computers using discord bot and python 3. ! If your target is a windows system, you may want to compile your payload. Do this with py2exe or pyinstaller. MAINTAINERS Alisson Moretto | Twitter: @UndeadSec Github: @UndeadSec PREREQUISITES Python 3.x pip3 subprocess fro...

LOIC

INFO Low Orbit Ion Cannon LOIC is an open source network stress tool, written in C. LOIC is based on Praetox's LOIC project at https://sourceforge.net/projects/loic/ . DISCLAIMER LOIC is for educational purposes only, intended to help server owners develop a "hacker defense" attitude. This tool...

CVE-2023-45866_WIP

h0nkbtexploit Los dispositivos Samsung son vulnerables a una vulnerabilidad crítica de seguridad Bluetooth que permite a un atacante controlar el dispositivo objetivo como si estuviera conectado mediante un teclado Bluetooth, realizando diversas funciones de forma remota según el punto final. Est...

0net

0net：简单的Windows远程控制后门 简介： 0net是一个简单的Windows远程控制类后门程序。客户端使用c++编写在vc++6.0上编译通过。服务端使用python编写，可以跨平台使用。该项目目前正在开发中... 项目详细说明：http://www.s0nnet.com/0net 功能： 支持反向连接（IP和域名）到指定服务器 实现常见的远程指令：关机、重启、取消关机、弹窗、锁屏、重置光标、冻结鼠标和键盘 支持截取目标主机屏幕压缩后并传回服务端 支持开机自启动 支持通过管道实现远程CMD并传回服务端 支持文件上传、下载 支持键盘记录（实时记录和离线记录）--开发中...

CVE-2023-21823

CVE-2023-21823 Windows反向Shell 该仓库包含用于Windows操作系统的反向Shell的C代码。反向Shell允许使用命令行远程控制系统，提供在受感染机器上执行命令的能力。 重要说明 将此代码用于非法目的或在未经系统所有者许可的情况下使用是违法的，并且违背道德原则。此代码仅用于教育和研究目的。 构建 要构建该项目，您需要一个C编译器，例如MinGW或Microsoft Visual Studio。 MinGW 1. 如果您还没有MinGW，请先安装。 2. 打开命令提示符并导航到包含源代码的目录。 3. 运行以下命令构建项目： gcc -o...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : Rclone vulnerability (USN-8782-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8782-1 advisory. It was discovered that Rclone incorrectly handled unauthenticated requests to the remote...

USN-8782-1: Rclone vulnerability

It was discovered that Rclone incorrectly handled unauthenticated requests to the remote control API. An attacker could possibly use this issue to execute arbitrary commands as the user invoking rclone. CVE-2026-49980...

USN-8782-1 rclone vulnerability

It was discovered that Rclone incorrectly handled unauthenticated requests to the remote control API. An attacker could possibly use this issue to execute arbitrary commands as the user invoking rclone. CVE-2026-49980...

openSUSE 16 Security Update : kimi-code (openSUSE-SU-2026:21849-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21849-1 advisory. Changes in kimi-code: Update to version 0.42.0: Add an experimental Updates panel with paginated progress messages from the main agent and...

CVE-2026-89176

WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, whereas...

CVE-2026-89176

WeenyGenius is a computer lab management system developed by Howyar Technologies that suffers from a Missing Authentication vulnerability. Unauthenticated attackers on the same network can spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, while i...

CVE-2026-89176 Howyar｜WeenyGenius - Missing Authentication

WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, whereas...

EUVD-2026-76003

WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, whereas...