strutszeiro

strutszeiro Telegram Bot to manage botnets created with struts vulnerabilityCVE-2017-5638 Dependencies pip install -r requeriments.txt Config Create a telegram bot, save the API token in config/token.conf Create a telegram group, save the group id in config/group.conf Start python strutszeiro.py...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

telegram-c2

Telegram C2 Command and control a server via telegram bots. Installation Tutorial Video Create a telegram bot Edit main.py, set BOTAPIKEY to the bot's api key and telegramuserid to your telegram id Install the following dependencies pip install -r requirements.txt Compile to standalone binary for...

CANalyse

CANalyse CANalyse is a tool built to analyze the log files to find out unique datasets automatically and able to connect to simple user interfaces such as Telegram. Basically, while using this tool the attacker can provide a bot-ID and use the tool over the internet through telegram-bot. CANalyse...

telegram-bot-dumper

telegram-bot-dumper Easy dumping of all Telegram bot stuff. Input : only bot token. Output : bot name & info, all chats text history & media, bot's users info & photos. This is a Python implementation. 🚀 Fast Golang version by ScBoln. Requirements Python = 3.6 Telethon = 1.24.0 Register Telegram...

pulsegram

PulseGram PulseGram is a keylogger integrated with a Telegram bot. It is a monitoring tool that captures keystrokes, clipboard content, and screenshots, sending all the information to a configured Telegram bot. It is designed for use in adversary simulations and security testing contexts. ⚠️...

teletunnel

TeleTunnel v2 A Telegram-based remote access tool for Windows. Disclaimer: For authorized use on systems you own only ! Please 🙇 Features Remote administration via a Telegram bot. Secure control only accepts commands from your specified Telegram user ID. The bot have these features: ᴛᴇʟᴇᴛᴜɴɴᴇʟ ᴠ2...

Windows-Python-RAT

Windows-Python-RAT Microsoft Windows Remote Administrator Tool Language: Python Coder: Sir.4m1R Developer: Ahoora Mansouri Powered By The404Hacking Digital Security ReSearch Group Robot for initial Windows-Python-RAT testing Bot ID: @WPRATBot Token: 586363223:AAHSLdPnAE60avsT25lHjzRahtw6PhxDY Set...

TrashEmail

tl;dr TrashEmail is hosted Telegram bot that can save your private email address by offering disposable email address. It can create, manage, disposable email address and link them with your telegram bot chat. Where is the bot? - @trashemailbot How can I create dispoable mail id? - Decide a...

reconpal

ReconPal: 보안을 위한 NLP 활용 리콘Recon은 가장 중요한 단계 중 하나로, 쉬워 보이지만 제대로 수행하려면 많은 노력과 기술이 필요합니다. 올바른 도구, 올바른 쿼리/구문을 알고, 해당 쿼리를 실행하며, 정보를 상호 연관시키고, 출력을 정리해야 합니다. 이 모든 것은 숙련된 정보 보안/리콘 전문가에게는 쉬울 수 있지만, 그 외의 사람들에게는 여전히 마법에 가깝습니다. "싱가포르에서 UDP를 지원하는 오픈 Memcached 서버를 찾아줘" 또는 "싱가포르에 있는 IP 카메라 중 기본 자격 증명을 사용하는 것은 몇...

reconpal

ReconPal: Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right tools, correct queries/syntax, run those queries, correlate the information, and sanitize the output. All of this might ...

CVE-2025-51396

Exploit Title: LiveHelperChat Live Help Configuration Telegram Bot. 3. In the Bot Username field, enter the following payload: " 4. Save the settings. 5. Revisit the Telegram configuration panel...

RAT-via-Telegram

RAT-via-Telegram Dviros's notes: Windows Remote Post Breach Tool via Telegram Python 2.7, Originally created by Ritiek, Forked and modified by mvrozanti and then myself. The whole purpose of this tool is to demonstrate as a "PoC" the control of an already breached machine, via Telegram. As the sa...

WhoAmIMailBot

Who Am I Mail Bot What is it? Who Am I Mail Bot is a service to mask your e-mails. It was inspired by Blur, where you can create an alias for your e-mail and use it to signup on applications. The problem with Blur is that all e-mails pass trough their infraestructure and I don't need/want anybody...

bt2

bt2: Blaze Telegram 后门工具包 bt2 是一个基于 Python 的后门程序，以 IM 机器人形式存在，利用 Telegram 提供的基础设施和功能丰富的机器人 API，稍加改造其通信平台以充当 C&C 服务器。 依赖项 Telepot requests 安装 $ sudo pip install telepot $ sudo pip install requests PS: Telepot 需要至少 requests 2.9.1 才能正常工作。 局限性 目前 shellcode 执行组件依赖于 ctypes，仅适用于 Windows 平台。 使用方法...

chatter

april 9, 2023 abandonware - sorry - busy elsewhere. will recode from scratch in a xplatform language in exchange for tons of money. october 6, 2021 this may soon no longer be abandonware. as for now it is very unstable. i'd like to recode it from scratch. description chatter is a proof of concept...

RAT-via-Telegram

RAT-via-Telegram Windows Remote Administration Tool via Telegram now in Python 3.7! | Originally created by Ritiek Why another one? The current Remote Administration Tools in the market face 2 major problems: Lack of encryption. Require port forwarding in order to control from hundreds of miles...

CVE-2024-9821

CVE-2024-9821 Bot for Telegram on WooCommerce = 1.2.4 - Authenticated Subscriber+ Telegram Bot Token Disclosure to Authentication Bypass Description The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on th...

MAL-2026-17304 Malicious code in dotenv-precheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446a8483dbc9e696506f44c6777b7c086b1b919b2585b5e5c99ca5f6e2e19a8e [email protected] is a credential-stealing package disguised as a dotenv preflight utility. package.json wires index.js as a postinstall script, ...

CVE-2026-101050

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...