MalSeclogon

MalSeclogon Ein kleines Tool, um mit dem Seclogon-Dienst zu spielen. Vollständige technische Details unter: https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html Verwendung root@kitploit: MalSeclogon...

WebView2-Cookie-Stealer

Post del blog Per maggiori informazioni, si prega di leggere questo post del blog. Codice sorgente Questo codice è una versione modificata del codice WebView2 di Microsoft. Il codice attuale può essere ripulito e reso molto migliore. Demo Esempio di avvio Esempio di utilizzo Utilizzo Testato su...

fakelogonscreen

FakeLogonScreen FakeLogonScreen é um utilitário para simular a tela de logon do Windows a fim de obter a senha do usuário. A senha inserida é validada no Active Directory ou na máquina local para garantir que está correta e, em seguida, é exibida no console ou salva em disco. Pode ser executado...

AzTokenFinder

AzTokenFinder Ist ein kleines Tool, um JWT oder JWT-ähnliche Daten aus verschiedenen Prozessen wie PowerShell, Excel, Word oder anderen zu extrahieren. Die Idee wurde von dem Blogbeitrag https://mrd0x.com/stealing-tokens-from-office-applications/ von dem großartigen @mrd0x inspiriert. In der neue...

CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing

4. CVE-2026-2828 – WebGPU: furto di pixel cross-origin tramite temporizzazione Panoramica Un sito web malintenzionato utilizza la temporizzazione degli shader di calcolo WebGPU per misurare il tempo di rendering di un iframe cross-origin, recuperando i valori dei pixel di contenuti sensibili ad...

rtpnatscan

rtpnatscan Uno strumento da riga di comando minimalista per verificare se il tuo proxy RTP / helper NAT è vulnerabile agli attacchi di furto NAT RTP...

CVE-2024-6529

वर्डप्रेस प्लगइन्स में कमजोरियों के लिए प्रूफ ऑफ कॉन्सेप्ट PoC इस रिपॉजिटरी में विभिन्न वर्डप्रेस प्लगइन्स में खोजी गई विभिन्न कमजोरियों के लिए प्रूफ ऑफ कॉन्सेप्ट PoC स्क्रिप्ट्स शामिल हैं। ये स्क्रिप्ट्स दर्शाती हैं कि हमलावर इन कमजोरियों का उपयोग करके दुर्भावनापूर्ण क्रियाएं कैसे कर सकते हैं।...

fb-phisher-python

Facebook Phishing Ursprünglicher Autor : Arslan Mughal VON : arjunindia Ursprüngliches Repository : https://github.com/arslanmughal5566/facebookphishing Über das Skript : Mit diesem Skript können Sie Facebook-Login-Anmeldedaten mit einigen Social-Engineering-Fähigkeiten stehlen. Voraussetzungen :...

github-dev-token-steal-poc

github-dev-token-steal-poc Prova di concetto per la vulnerabilità descritta in https://blog.ammaraskar.com/github-token-stealing...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Yujin Huang, Xin Zheng, Xingliang Yuan, Kwok-Yan Lam I sistemi di intelligenza artificiale su dispositivo mobile eseguono modelli AI localmente attraverso framework ML come LiteRT/TFLite , Core M...

CVE-2024-34568

Exploit-Titel: LetterPress = 1.2.1 - Cookie-Diebstahl-Schwachstelle Exploit-Autor: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L Referenzen: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

SSH-Stealer

RunAs-Stealer Capacità di keylogging intelligente per rubare le credenziali SSH, inclusi password e chiave privata Uso Le credenziali rubate vengono scritte nello stream ADS log di C:\Users\Desktop\desktop.ini. Per ottenere le credenziali, digitare il comando cmd: root@kitploit: more...

Malicious code in idnna (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6f2ec3b09fbcf061a9f4ffefe1c179983ad8cdc0af705f2218280ade3c1da3 The package publishes under a name that closely resembles the widely-used idna package and advertises itself as 'HTTP client utilities', but the only...

Malicious code in @or-sdk/idw-skill (npm)

npm/@or-sdk/idw-skill is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

Malicious code in @or-sdk/cards (npm)

npm/@or-sdk/cards is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

Malicious code in @or-sdk/content-request (npm)

npm/@or-sdk/content-request is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @or-sdk/event-manager (npm)

npm/@or-sdk/event-manager is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

Malicious code in @onereach/idw-contracts (npm)

npm/@onereach/idw-contracts is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11560 Malicious code in @cacheable/node-cache (npm)

npm/@cacheable/node-cache version 3.1.2 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases...

RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim's phone, steal their banking logins, and capture the one-time codes that protect their accounts. Zimperium's zLabs, which found th...