RemoteAssistance-Cpp

RemoteAssistance-Cpp TeamViewer와 같은 RemoteAssistance C++ 버전 https://dydtjr1128.github.io/RemoteAssistance-Cpp/ Java Swing 버전도 만들었습니다 = Link 이 버전은 아직 네트워크를 사용하지 않는 로컬 미러링까지만 구현되었습니다. ToDo - x 화면 캡처 - x 더블 버퍼링 - 네트워크 코드socket 추가 - 이미지 전송 계획 - Boost asio 또는 IOCP - SIMD 비교 - OpenGL 기반 화면 캡처 샘플...

Powershell-RAT

Powershell-RAT Бэкдор на Python, использующий Gmail для эксфильтрации данных в виде вложения электронной почты. Этот RAT поможет кому-то во время red team-задач внедрить бэкдор на любую машину Windows. Он отслеживает активность пользователя с помощью захвата экрана и отправляет информацию...

Keylogger

Вводы в почту. Получайте ввод с клавиатуры, мыши, снимки экрана, микрофона и отправляйте на вашу почту. Цель проекта — тестирование безопасности информационных систем. УСТАНОВКА Вам не нужно ничего делать для установки, просто запустите скрипт ИСПОЛЬЗОВАНИЕ •Создайте аккаунт на...

0net

0net：간단한 Windows 원격 제어 백도어 소개： 0net은 간단한 Windows 원격 제어형 백도어 프로그램입니다. 클라이언트는 c++로 작성되었으며 vc++6.0에서 컴파일됩니다. 서버는 python으로 작성되어 크로스 플랫폼에서 사용할 수 있습니다. 이 프로젝트는 현재 개발 중입니다... 프로젝트 상세 설명：http://www.s0nnet.com/0net 기능： 지정된 서버로 리버스 연결IP 및 도메인 지원 일반적인 원격 명령 구현：종료, 재부팅, 종료 취소, 팝업, 화면 잠금, 커서 재설정, 마우스 및 키보드 잠금...

Malicious code in node-env-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3e0e1b364a3d74534d6ce1eca74778a85e508cf10952f84f36bf1badd8a581 The package is advertised as an environment configuration resolver but its postinstall script installs a hidden persistent agent into user-level...

CLEANSTART-2024-XH49329 Use after free in Screen Capture in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Screen Capture in Google Chrome prior to 98...

MAL-2026-16441 Malicious code in moidevl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b05c7a5581562edc719cbaaf2f6b317d322a6a2ef96c9fc905b53394e42101 Despite a README describing a 'Windows diagnostic utility,' the package implements an anti-proctoring overlay for cheating on remote exams Safe Exam...

MAL-2026-16388 Malicious code in nodetokyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or b...

Exploit for CVE-2026-84388

FortiPAM Chrome Extension UI Layer RCE PoC - CVE-2026-84388...

CVE-2026-92299

@jitsi/electron-sdk (the Electron-based desktop client for Jitsi Meet) prior to 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker. This allows any script running in the meeting page to call the jitsi-screen-sharing-get-sources IPC route and ...

CVE-2026-92299 @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources via contextBridge without requiring an active getDisplayMedia picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop...

CVE-2026-92299 @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources via contextBridge without requiring an active getDisplayMedia picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop...

CVE-2026-92299 @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources via contextBridge without requiring an active getDisplayMedia picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop...

MAL-2026-15674 Malicious code in bamru (npm)

This package presents itself as a "System binary configuration tool" — that is its entire manifest description, with keywords system, binary, util and config, an author of "SysDev", and no repository. What it actually installs is a concealed clipboard and screen harvester that elevates itself to...

Malicious code in bamru (npm)

This package presents itself as a "System binary configuration tool" — that is its entire manifest description, with keywords system, binary, util and config, an author of "SysDev", and no repository. What it actually installs is a concealed clipboard and screen harvester that elevates itself to...

Malicious code in gfff5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f12f82dc8c54282b428617c03537a54f3361841b02233b6626eae6f1e8ec4ee gfff5 advertises itself as a 'System binary configuration tool' but its actual behavior is covert surveillance. When the CLI is invoked, index.js...

MAL-2026-14212 Malicious code in syboy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53c03163c0e0b47e20d28751745a66ecd1c9aadda7e96d648e8390ba49506f7 On invocation, index.js spawns starttool.vbs via wscript.exe with detached/windowsHide flags; the VBS calls ShellExecute cmd.exe with the 'runas' ver...

Malicious code in bqq1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8709cb6f826b8ee95c1d8aef1bb12c769c165260483b6a95be782af9dbeb2ba The npm package bqq1 advertises itself as a 'System binary configuration tool' but ships a covert surveillance and remote-control payload. On...

EUVD-2026-57323

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, createmobiledatacollectionserver and createmobileactionserver in ufo/client/mcp/httpservers/mobilemcpserver.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without...

MAL-2026-13879 Malicious code in dakumangalsingh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502c2aae77a471762612a5114d299651b7e75571d5c6d9dd5665a3dc2c503327 package.json declares a postinstall hook that executes a bundled Windows PE launcher DakuMangalSingh\DakuMangalSingh.exe at npm install time. The...