112 matches found
venom
VENOM 1.0.17 - generador/compilador de shellcode de metasploit root@kitploit: Versión de lanzamiento : v1.0.17 Autor : pedro ubuntu r00t-3xp10it Nombre clave: Aconite Aconitum napellus Distros compatibles : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam desarrollo @2019...
V3n0M-Scanner
Venom Offensive Security Framework for Vulnerability Scanning & Pentesting Warning : Version 4.3.3 now requires PROXIES/VPN...
Venom
Venom - A Multi-hop Proxy for Penetration Testers 简体中文 | English Venom是一款为渗透测试人员设计的使用Go开发的多级代理工具。 Venom可将多个节点进行连接,然后以节点为跳板,构建多级代理。 渗透测试人员可以使用Venom轻松地将网络流量代理到多层内网,并轻松地管理代理节点。 此工具仅限于安全研究和教学,用户承担因使用此工具而导致的所有法律和相关责任! 作者不承担任何法律和相关责任! 特性 可视化网络拓扑 多级socks5代理 多级端口转发 端口复用 apache/mysql/... ssh隧道 交互式shell...
venom
Venom C2 Venom C2 是一个无依赖的 Python3 命令与控制框架,专为红队持久化设计,无需安装额外包即可在系统上运行。它包含一个 Flask 团队服务器、一个 Electron 操作员图形界面,以及一个通过可配置 AES 加密 JSON 消息在 HTTP/HTTPS 上进行通信的单文件 Python 代理。你可以用它执行命令、管理文件、维持访问权限,以及从受控系统创建 SSH 反向隧道。 背景 在网络权限提升过程中,我们接触了许多运行着奇异发行版和架构的生产系统。我们试图建立持久化控制,但手头的工具和技术都不奏效。此外,部分目标系统运行着 EDR。...
venom-rs
Shellcode Reflective DLL Injection sRDI in Rust Codename: Venom Shellcode reflective DLL injection sRDI is a process injection technique that allows us to convert a given DLL into a position-independent code which can then be injected using our favourite shellcode injection and execution techniqu...
Venom-JWT
Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试 郑重声明:文中所涉及的技术、思路和工具仅供以安全为目的的学习交流使用, 任何人不得将其用于非法用途以及盈利等目的,否则后果自行承担 。 针对JWT渗透开发的漏洞验证/密钥爆破工具,针对CVE-2015-9235/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ,也可使用字典/字符枚举的方式进行爆破 工具介绍 · 使用说明 · 注意事项 · 技术交流 工具介绍 该工具的诞生背景:...
S-V-Project-Implementation-of-CVE-2015-3256
CVE-2015-3456 VENOM — QEMU 崩溃 PoC 与分析 此仓库包含针对 CVE-2015-3456(“VENOM”)的可重现崩溃/拒绝服务概念验证(PoC),使用易受攻击的 QEMU 版本(v2.3.0)。 该项目演示了: 客户机控制对虚拟软盘控制器(FDC)的写入 触发易受攻击的 QEMU FDC 代码路径 使宿主机端 QEMU 进程崩溃 使用 GDB 捕获崩溃信息 此仓库不 包含虚拟机逃逸或宿主机代码执行漏洞。 仓库结构 root@kitploit: src/ venom-crash.c 客户机端崩溃 PoC scripts/ run-alpine.sh 使用...
security-advisories
security-advisories Avisos de seguridad públicos publicados por Me Chidubem Chukwu Terminal Venom, incluyendo divulgaciones de CVE e informes de vulnerabilidades para software de código abierto y de terceros...
Venom
Venom Venom es una biblioteca de C++ diseñada para ofrecer una forma alternativa de comunicarse. En lugar de crear un socket que pueda rastrearse hasta el proceso, crea un nuevo proceso de Edge separado y "oculto" no se muestra ninguna ventana Edge fue elegido porque es un navegador que está...
Asyncrat-Venom-Dcrat-Config-Extractor
Asyncrat-Venom-Dcrat-Config-Extractor Extractor de Config estático para Asyncrat/Dcrat/VenomRat Utiliza dnlib para localizar los datos de Config cifrados y los valores de cifrado asociados. Los valores se descifran en el script sin emular ni ejecutar código de malware Asume que la configuración s...
dvenom
🐍 Double Venom DVenom Double Venom DVenom 是一款帮助红队绕过防病毒软件的加密封装与加载器工具,用于处理你的 shellcode。 🚀 功能特性 🛡️ 能够绕过一些知名防病毒软件 AV。 🔒 提供多种加密方式:RC4、AES256、XOR 和 ROT。 🏗️ 生成 C、Rust、PowerShell、ASPX 和 VBA 格式的源代码。 🔄 采用不同的 shellcode 加载技术:VirtualAlloc、Process Injection、NT Section Injection、Hollow Process Injection。 🎓 快速上手...
Bogus Avast website fakes virus scan, installs Venom Stealer instead
A fake website impersonating Avast antivirus is tricking people into infecting their own computers. The site looks legitimate, runs what appears to be a virus scan, and claims your system is full of threats. But the results are fake: when you’re prompted to “fix” the problem, the download you’re...
Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown
Malware families like Rhadamanthys Stealer, Venom RAT, and the Elysium botnet have been disrupted as part of a coordinated law enforcement operation led by Europol and Eurojust. The activity, which took place between November 10 and 13, 2025, marks Please remove image compression the latest phase...
EUVD-2006-0168
Malware in sbrugna...
TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks
The threat actor known as TA558 has been attributed to a fresh set of attacks delivering various remote access trojans RATs like Venom RAT to breach hotels in Brazil and Spanish-speaking markets. Russian cybersecurity vendor Kaspersky is tracking the activity, observed in summer 2025, to a cluste...
TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks
The threat actor known as TA558 has been attributed to a fresh set of attacks delivering various remote access trojans RATs like Venom RAT to breach hotels in Brazil and Spanish-speaking markets. Russian cybersecurity vendor Kaspersky is tracking the activity, observed in summer 2025, to a cluste...
Cybercriminals Clone Antivirus Site to Spread Venom RAT and Steal Crypto Wallets
Cybersecurity researchers have disclosed a new malicious campaign that uses a fake website advertising antivirus software from Bitdefender to dupe victims into downloading a remote access trojan called Venom RAT. The campaign indicates a "clear intent to target individuals for financial gain by...
Earth Ammit Disrupts Drone Supply Chains Through Coordinated Multi-Wave Attacks in Taiwan
Trend™ Research discusses the evolving tradecraft of threat actor Earth Ammit, proven by the advanced toolset used in its TIDRONE and VENOM campaigns that targeted the drone supply chain...
More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader
The threat actors behind the Moreeggs malware have been linked to two new malware families, indicating an expansion of its malware-as-a-service MaaS operation. This includes a novel information-stealing backdoor called RevC2 and a loader codenamed Venom Loader, both of which are deployed using...
Attackers Using Obfuscation Tools to Deliver Multi-Stage Malware via Invoice Phishing
Cybersecurity researchers have discovered an intricate multi-stage attack that leverages invoice-themed phishing decoys to deliver a wide range of malware such as Venom RAT, Remcos RAT, XWorm, NanoCore RAT, and a stealer that targets crypto wallets. The email messages come with Scalable Vector...