adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

WhatsRCE

WhatsRCE これはCVE-2019-11932（WhatsApp リモートコード実行）用のペイロードを自動生成するツールです 1. GCCを自動インストール（無害なコマンドです。オープンソースなので確認できます） 2. .GIF ファイルに保存します 使い方 sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRCE && bash start.sh シェルを取得する方法 1. .GIF ファイルを被害者ユーザーに画像ではなくドキュメントとして 送信します 2...

CVE-2019-18426

これは元々、PerimeterX社の公式Githubに、私の業務用Githubアカウントを通じて公開されたものです。 これは私の業務によるものですが、すべての権利および法的な責任はPerimeterX社に帰属します。 WhatsAppの脆弱性開示 - Open Redirect + CSP Bypass + Persistent XSS + FS読み取り権限 + RCEの可能性 CVE-2019-18426 Exploit DB 技術記事 元の脆弱性開示ドキュメント デモ動画！...

CVE-2020-11932

CVE-2020-11932 WhatsAppエクスプロイトPoCのDouble-Freeバグ。 注: シェルを取得するためにexploit.c内のリスナーIPを設定してください。 nc -lvp 1337 または任意のポート。 そしてコンパイル。 make または gcc -o exploit egiflib.c exploit.c 次に./exploitを実行し、内容を.gifに保存。 被害者に送信。 ソース https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/. PoC動画...

WhatsRCE

WhatsRCE これは CVE-2019-11932（WhatsApp リモートコード実行）用の自動生成ペイロードです。 1. GCC を自動インストール（無害なコマンドです。オープンソースであることを確認できます） 2. .GIF ファイルに保存 使い方は？ sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRCE && bash start.sh シェルを入手するには？ 1. 被害者ユーザーに .GIF ファイルを 画像としてではなく文書として 送信するだけです。 2...

MAL-2026-17344 Malicious code in @bellaxchuu/familyxtrx (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17346 Malicious code in @bellaxchuu/privatebails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17345 Malicious code in @bellaxchuu/flowblue (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17350 Malicious code in @bellaxchuu/xtrxbails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17349 Malicious code in @bellaxchuu/velvetry (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17347 Malicious code in @bellaxchuu/skyblue (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17400 Malicious code in my-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17384 Malicious code in @xayz/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17390 Malicious code in cantarella-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17385 Malicious code in albert-anitabaileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17371 Malicious code in @nyzzpediaa/baileys-new (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

Malicious code in @bellaxchuu/belbails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17342 Malicious code in @bellaxchuu/belbails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

Malicious code in @lendxntaa/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17365 Malicious code in @lendxntaa/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...