WifiPassword-Stealer

WifiPassword-Stealer Obtenez tous les mots de passe Wi-Fi enregistrés depuis l'ordinateur cible. INSTALLATION si vous utilisez un fichier python root@kitploit: pip install smtplib pip install subprocess pip install glob UTILISATION •Créez un compte sur "https://mailtrap.io/" en utilisant un email...

SharpGmailC2

SharpGmailC2 Наш дружелюбный Gmail будет выступать в роли сервера, а имплант будет выводить данные через SMTP и читать команды от C2 Gmail по протоколу IMAP. DISCLAIMER: Этот проект не работает против Windows Defender после 29 ноября 2022 года. Этот инструмент теперь сигнатурится Microsoft Window...

New Snake Keylogger Variant Leverages AutoIt Scripting to Evade Detection

A new variant of the Snake Keylogger malware is being used to actively target Windows users located in China, Turkey, Indonesia, Taiwan, and Spain. Fortinet FortiGuard Labs said the new version of the malware has been behind over 280 million blocked infection attempts worldwide since the start of...

Engel & Völkers Technology GmbH: Blind SSRF on infodesk.engelvoelkers.com via proxy.php

Summary: The application has a proxy.php file which basically accepts a parameter via url query parameter and passes it to fopen. However, it doesn't validate the parameter value prior to passing it to fopen- making it possible to influence what's being done. That said, because of code following...

Stealthy Malware Flies Under AV Radar with Advanced Obfuscation

Researchers warn hackers are putting a new spin on old injection techniques and successfully end-running endpoint protection. They are tracking a campaign, that kicked off in January, that is still going strong exploiting weaknesses in web browsers. The objective is to hide in the background of...