mtproto-dissector

Telegram Protocol Dissector This is a Wireshark dissector that helps you understand the Telegram traffic around you. It dissects the Telegram packets it sees according to the MTProto 2.0 Protocol. Features Supported transport protocols: Abridged, Full, Intermediate, HTTP Supports de-obfuscation...

TeleGram-Scraper

Telegram Group Scrapper • API Setup Go to http://my.telegram.org and log in. Click on API development tools and fill the required fields. put app name you want & select other in platform Example : copy "apiid" & "apihash" after clicking create app will be used in setup.py • How To Install and Use...

telegram_bbbot

telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel History This bot adopted special for deploying to Heroku General purposes of this got - "Be helpful for infosec community!" Bot use https://github.com/maddevsio/bbcrawler for fetching information Used heroku...

lanGhost

⚠️ Warning! This project is no longer maintained and may not work as excepted. A LAN dropbox chatbot controllable via Telegram features: installation: warning: lanGhost is designed for Raspberry Pis Raspbian /Kali for RPi. Running it on other/desktop distros could cause issues and may not work as...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

sshLooter

DON'T USE THIS There's a C version which is much better sshLooterC sshLooter Script to steal passwords from ssh. Install git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configuration Edit the script on install.sh, and add your telegram bot api, and your userid. Call the...

BrainDamage

BrainDamage A python based remote administration tool which uses Telegram as C&C server. /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Coded by: Mehul Jain -- For windows only | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ || |,||,|| ||/ -- Persistance -- USB...

Geogramint

Geogramint - OSINT Geolocalization tool for Telegram The End : 06/09/2024 Pavel Durov, the founder and CEO of Telegram, announced the discontinuation of the "People Nearby" feature. The feature has been non-functional for a week. The removal of this feature means that Geogramint and other OSINT...

chatter

april 9, 2023 abandonware - sorry - busy elsewhere. will recode from scratch in a xplatform language in exchange for tons of money. october 6, 2021 this may soon no longer be abandonware. as for now it is very unstable. i'd like to recode it from scratch. description chatter is a proof of concept...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

Malicious code in ukraine69 (PyPI)

Source: kam193 751255a551e996471674b44aea1cac8c92313caeaf22bb1584c96e4be5036b5a During import, package performs actions intended to escape sandbox, find Telegram-bot session files and initiate malicious account deletion. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in ukraine69 (PyPI)

Importing ukraine69 in versions 1.2.0–1.2.2 and 1.2.5–1.2.8 searches for local .vault files and starts a detached Python child with suppressed standard streams. Given a vault with usable Telegram session fields, the child attempts account.deleteAccount using GoyGram, with a Telethon fallback in...

Linux Distros Unpatched Vulnerability : CVE-2026-111105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

CVE-2026-49410

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegramauthhandler consumes an attacker-supplied one-time Telegram login...

CVE-2026-49410

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegramauthhandler consumes an attacker-supplied one-time Telegram login...

CVE-2026-49410

Versions before 0.56.0 of OpenHuman , an open-source agent harness, are vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is that the telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes the resulting JWT to credentials::ops::store_session ...

CVE-2026-49410 OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegramauthhandler consumes an attacker-supplied one-time Telegram login...

CVE-2026-49410 OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegramauthhandler consumes an attacker-supplied one-time Telegram login...

Malicious code in marocolor (PyPI)

Source: kam193 38b0fa2ee77af46ad9daf78c024a0f599fd0798eef7605cb3eed50d8db65fa22 Package is intended for stealing files to a hardcoded location and performing a DoS on the victim's machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in marocolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8206a6d3278ef99ffe6f33a695ca3dd6b4ed9856912d79f3066a375d95bcd509 On import of marocolor, a daemon thread recursively walks the user's home directory and uploads every file matching...