fake-sandbox

伪造沙箱进程 FSP 这个小脚本会模拟分析工具、沙箱和虚拟机软件的虚假进程，有些恶意软件会试图避开这些进程。 你可以从这里下载由 @x0rz 编写的原始脚本（顺便说一句，感谢他）。 你也可以从根目录下载我稍作优化的脚本。该文件名为 fsp.ps1。这个脚本也用于 FSP 安装程序中。 脚本功能 某些（更高级的）间谍软件只要这些创建的进程在运行，就可能停止正常执行。 要求：Powershell（Windows 7 及更高版本预装），仅此而已。 完全不占用系统负载（几乎）。 安装程序功能 自动将脚本安装到你的自启动目录，这样你就不必在每次重新登录时手动执行它。 要求：仅需 Powershel...

mvt

Kit de Verificación Móvil Mobile Verification Toolkit !IMPORTANT Recientemente fusionamos la rama "v3". Esto introdujo cambios que rompen la compatibilidad. Si dependías de la salida de mvt en otros scripts, es posible que se hayan roto. Más detalles: https://github.com/mvt-project/mvt/issues/757...

CVE-2023-36168

CVE-2023-36168 AVG AVG Anti-Spyware v.7.5 中的一个问题允许攻击者通过恶意脚本向 guard.exe 组件执行任意代码 漏洞利用标题：AVG Anti Spyware 7.5 - Unquoted Service Path 日期：05/08/2023 漏洞利用作者：Idan Malihi 厂商主页：https://www.avg.com 软件链接：https://www.avg.com/en-ww/homepagepc 版本：7.5 测试环境：Microsoft Windows 10 Pro CVE编号：CVE-2023-36168 PoC...

hijackthis

Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...

iGPU-Leak

CVE-2019-14615: The iGPU-Leak Vulnerability Wenjian He, Wei Zhang, Sharad Sinha and Sanjeev Das. iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU. In Proceedings of the 25th Asia and South Pacific Design Automation Conference ASP-DAC'20. View PDF View Slides What happened? ...

WindowsSpyBlocker

关于 WindowsSpyBlocker 🛡️ 是一款用 Go 编写的应用程序，以一个单独的可执行文件的形式发布，用于在 Windows 系统上阻止间谍和跟踪行为。 本项目的思路是基于一组工具捕获和解读网络流量。根据服务之间的交互以及流量的源地址或目标地址，创建规则并按分配进行排序。 文档与下载 文档和下载可在 https://crazymax.dev/WindowsSpyBlocker/ 获取。 贡献 想要贡献？太棒了！最基础的支持方式是给项目加星标，或提交问题。你也可以通过 在 GitHub 上成为赞助者 或 PayPal 捐赠 来支持这个项目，以确保这段旅程无限期地继续下去！...

inside-pegasus

Inside Pegasus: documentos clave de WhatsApp v. NSO Group Una selección de documentos internos del Grupo NSO, materiales de producto y testimonios jurados que entraron en el registro público en WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limit...

sAINT

已停止开发 我决定停止开发此工具，以便将精力集中在其他项目上。 请随意克隆此仓库并继续开发此工具。 sAINT sAINT 是一个用 Java 编写的 Windows 系统间谍软件生成器。 免责声明 :computer: 本项目仅用于正当目的和个人使用。 本软件按“原样”提供，不附带任何形式的担保。您自行承担使用本软件的风险。使用的完全责任由最终用户承担。开发者不对因使用本程序造成的任何误用或损害承担任何责任或义务。 功能 键盘记录器 截取屏幕 摄像头捕获 持久化 测试环境 Kali Linux - ROLLING EDITION 使用方法 root@kitploit: Install...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Samsung图像编解码器远程代码执行漏洞 ⚙️ 这是什么 三星图像处理库 libimagecodec.quram.so 中的一个严重 漏洞——该库用于 Galaxy Android 设备。 🧩 这是一个越界写入 缺陷，在解析恶意图像文件 （如 DNG）时被触发。 📸 精心制作的图像可使攻击者在设备上远程执行任意代码 。 “libimagecodec.quram.so 在 SMR Apr-2025 Release 1 之前存在越界写入漏洞，允许远程攻击者执行任意代码。” — NVD 摘要 🚨 严重程度 指标| 值 ---|--- CVSS v3.1...

CVE-2026-67595

CVE-2026-67595 — JavaScript malicioso incrustado en VaahCMS Aviso de seguridad para CVE-2026-67595 : una carga útil de software espía de JavaScript ofuscada incluida en las versiones oficiales de VaahCMS un problema de cadena de suministro / código malicioso incrustado, descubierta y reportada de...

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The...

MAL-2026-14516 Malicious code in minecraft-ytreceiver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...

Astra Linux – Vulnerability in ca-certificates

Certifi is a curated collection of Root Certificates designed to validate the reliability of SSL certificates and verify the identity of TLS hosts. On December 7, 2022, Certifi removed Root Certificates from “TrustCor” from the root store. These certificates are currently being removed from...

MAL-2026-14271 Malicious code in nodeberlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee18c4afae327b271a2178e90822f750a17d97f7dfb1236e6dd37ef9410d9 The CLI polls the system clipboard every 300ms and captures full-desktop or user-snipped screen regions, then POSTs the JSON text and base64-encoded...

Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

Apple on Thursday sent a fresh batch of notifications to customers whom it suspects may have been targeted by mercenary spyware attacks. In a statement shared with TechCrunch, the iPhone maker said it alerted an unspecified number of users targeted in 110 countries and that it has notified...

MAL-2026-11413 Malicious code in reguestsc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20e4ae2ce79408a65e9b4bb348c2d69e20eb6072e3641531e2ec5773f1bbddd6 Clones of a legitimate library with injected code downloading and executing a malicious executable on import. Dynamic analysis identified it as salatstealer. -...

European Parliament Member Investigating Spyware Was Hacked With Pegasus

A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the abuse of such commercial surveillance tools...

WhatsApp Says It Blocked Pegasus Spyware Campaign Linked to NSO

WhatsApp says it blocked Israeli firm NSO’s Pegasus spyware activity and is asking a US court to treat the targeting as an injunction breach...

Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order

Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group. In addition, the tech giant said it's filing a federal court contempt order against the company for violating a permanent injunction that barred it from targeting WhatsApp and its users...

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin , according to findings from ESET. The Slovakian cybersecurity company said it first detected the malware spread via multiple campaigns in early 2025, with each attack wave making use of distinct websites...