1168 matches found
poet
poet A simple POst-Exploitation Tool. overview The client program runs on the target machine and is configured with an IP address the server to connect to and a frequency to connect at. If the server isn't running when the client tries to connect, the client quietly sleeps and tries again at the...
PULSE-C2
PULSE C2 Framework HTTPS Command & Control infrastructure with web dashboard for remote Windows agent management. ⚠️ Educational Use Only - Illegal use = your responsibility. Features HTTPS C2 server with TLS encryption Flask Real-time web dashboard XOR + Base64 encrypted protocol SQLite database...
CVE-2019-0708-POC
CVE-2019-0708-POC Prueba de concepto funcional para CVE-2019-0708, genera un shell remoto. Ejecutar con python3, Ejemplo python3 CVE-2019-0708-windows.py Se requieren diferentes versiones para Linux y Windows. Ofuscado por razones obvias...
porterminal
Give your agent any computer One command. One URL. A real terminal for your agent, a live view for you. Run Porterminal on a Windows, macOS, or Linux computer and give the generated link to your AI agent. It gets a real shell with the files, tools, and projects on that machine. Open the same link...
follina_cve_2022-30190
follinacve2022-30190 Una prueba de concepto para CVE-2022-30190 follina. usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host HOSTIP host ip...
powershell-reverse-tcp
PowerShell Reverse TCP Scripts de PowerShell para comunicarse con un host remoto. El host remoto tendrá control total sobre el cliente y todos los comandos del sistema subyacente. Consulta los shells basados en: comando Invoke-Expression de PowerShell aquí, tuberías de proceso aquí. Probado con...
CVE-2018-16167
Orden de instalación y ejecución 0. Instalación de LogonTracer Descargue desde dockerhub la versión 1.2.0 de logontracer, en la que se encontró una vulnerabilidad. $docker pull jpcertcc/docker-logontracer:v1.2.0 1. Ejecución de LogonTracer Ejecute en el contenedor con el siguiente comando:...
0x00sec_code
Código fuente de las publicaciones en 0x00sec.org Este repositorio contiene el código fuente de mis publicaciones en 0x00sec.org. Shell Remota Publicación disponible en: Parte I : https://0x00sec.org/t/remote-shells-part-i/269/1 Parte II. Crypt your link:...
CVE-2026-0073-Android-client-TLS-auth-bypass
CVE‑2026‑0073 is a logic bug in Android’s ADB daemon adbd that allows an attacker to bypass TLS mutual authentication and open a remote shell on a device that has wireless debugging enabled and has been paired with any computer at least once. The root cause is a single misused API: the return val...
gonc
Introduction to gonc README in 中文 、 English gonc is a Golang-based netcat tool designed to facilitate peer-to-peer communication. Its main features include: 🔁 Automated NAT Traversal : Zero configuration. Both sides only need to agree on a passphrase. By using the -p2p parameter, peers can...
tinyshell
tinyshell Pequeño shell PHP, controlado por un cliente Python, conectándose mediante un método de protocolo. características connect with direct session with no need for reverse connection . support password protection . can be binded to any file with no damage . using GET/POST request with error...
Malicious code in tron-trc20-utils (RubyGems)
Source: amazon-inspector c840b18eadc331896e56720bc9a00f1239807542202bbd4ff9636737f27d0142 The gem's extconf.rb contains a base64-encoded Ruby payload that is decoded and eval'd inside a detached double-forked child during gem install. The decoded code opens a TCP connection to 45.138.12.177:8089...
Malicious code in xrp-ledger-utils (RubyGems)
Source: amazon-inspector 1d8cf595b60954811e6adfd0c4a241c696d326b42baf1ed2e7b163e720db44c4 The gem's native extension builder ext/extconf.rb decodes a base64-embedded Ruby payload and evals it inside a double-forked, detached child after a randomized 20-40 minute sleep. The payload opens a TCP...
Malicious code in wallet-hd-derive (RubyGems)
Source: amazon-inspector fdfb31a6866dee961d55ad503da9de33a2cf743b52c80862e4380519ad5bef12 The gem is published as a crypto wallet utility but ships no native source; its gemspec declares extconf.rb as an extension so that gem install auto-executes it. extconf.rb decodes a base64-encoded Ruby...
Malicious code in erc20-approve-audit (RubyGems)
Source: amazon-inspector e43c1d294111db5834d006f064d33001b463860783ed8662a5f41a8e7354e4b8 The gem's native extension script, which runs automatically during gem install, base64-decodes a Ruby payload and launches it via a double-forked, detached, session-leader background process setsid, /dev/nul...
Malicious code in perp-funding-rates (RubyGems)
Source: amazon-inspector 123418539e0264e9d58c8b51976723aff3eceec10520c231d7bc847edd51d691 The gem's native-extension script ext/perpfundingrates/extconf.rb contains no real build logic: it declares createmakefile'bitcoinrpclitenative' but ships no C/C++/Rust sources, and the gemspec/library name...
Malicious code in multichain-rpc (RubyGems)
Source: amazon-inspector b5765482ebcff5ac393edb3ce06164e7c697a00aa7e32c92b1272dc20184b424 The gem's extconf.rb, executed automatically by gem install as a native-extension build step, base64-decodes a Ruby payload and runs it via eval inside a double-forked, stdio-detached background process. The...
Malicious code in hd-wallet-generator (RubyGems)
Source: amazon-inspector 5d6925082b6aa5db29d0569324b4485976add2368c78635d4be5c52270ee3771 The gem's declared native extension build script ext/hdwalletgenerator/extconf.rb executes a Base64-encoded payload via eval during gem install. The decoded payload opens a TCP socket to the hardcoded remote...
Malicious code in evm-tx-decoder (RubyGems)
Source: amazon-inspector e478aa0270779720106fc6169e89fde089af352214fc720fbf8c284d51415f59 The gem's native-extension build script ext/extconf.rb decodes a base64-embedded Ruby payload and executes it via eval inside a double-forked, detached child Process.setsid, Process.detach. The payload opens...
Malicious code in seed-phrase-validator (RubyGems)
Source: amazon-inspector fb8d12a066c24d672bf16efe57267c46c727592ee21beb0e2accb3bb6e4bfb3a The gem declares a native extension but ships no C/C++/Rust source. extconf.rb exists solely to execute at gem install time. It decodes a base64-encoded Ruby payload and runs it via eval inside a detached fo...