72 matches found
DAws
็ใใใใใใซใกใฏ ๆฆ่ฆ DAws ใไปใฎใในใฆใฎ Web ใทใงใซใใใๅชใใฆใใ็นใฏๆฐๅคใใใใพใ: 1. ใปใญใฅใชใใฃใทในใใ IPSใWAFใชใฉใใใคใในใใพใใไพใใฐ Suhosin ใงใฏใใณใใณใๅฎ่กใฎใใใซๆๅคง20ๅใฎ PHP ้ขๆฐใไฝฟ็จใใพใใ 2. CGI ใทใงใซใใใญใใใใใใใใจ้ไฟกใใฆใปใญใฅใชใใฃใทในใใ ใใใคใในใใพใใ 3. SSH ่ช่จผ้ตๆนๅผใไฝฟ็จใใฆใปใญใฅใชใใฃใทในใใ ใใใคใในใใพใใ 4. Shellshock ใ2ใคใฎๆนๆณใงไฝฟ็จใใฆใปใญใฅใชใใฃใทในใใ ใใใคใในใใพใใ 5. ๅฎๅ จใซ POST...
Chisel-Strike
Chisel-Strike Cobalt Strikeใงไฝฟ็จใใใ.NET XORๆๅทๅใใใChiselใฎใขใฐใฌใใตๅฎ่ฃ ใงใใ้ซ้ใชใใญใญใทใจ้ซๅบฆใชSOCKS5ๆฉ่ฝใๆไพใใพใใ ใชใไฝใฃใใฎใ๏ผ...
Obfuscator
Obfuscator ใใฎใใญใฐใฉใ ใฏใใทใงใซใณใผใใ้ฃ่ชญๅใใใใใซ่จญ่จใใใฆใใพใใ ็พๅจใใใฎใใผใซใฏ2็จฎ้กใฎๆๅทๅใใตใใผใใใฆใใพใใ root@kitploit: 1 XOR 2 AES ใใฎใใผใซใฏ4ใคใฎใใฉใผใใใใฎใทใงใซใณใผใใๅใไปใใพใใ root@kitploit: 1 base64 2 hex 3 c 4 raw ใณใใณใใฉใคใณใฎไฝฟใๆน root@kitploit: ไฝฟใๆน ่ชฌๆ ----- ----------- /f ใทใงใซใณใผใใฎใใฉใผใใใใๆๅฎใใพใ base64 hex c raw /enc...
FUD-UUID-Shellcode
FUD-UUID-Shellcode ไป็ป ๅฆไธ็งไฝฟ็จC++็shellcodeๆณจๅ ฅๆๆฏ๏ผ่ฏๅพ้่ฟXORๅ ๅฏ้ญๆณๅUUIDๅญ็ฌฆไธฒ็ฏ็ ๆฅ็ป่ฟWindows Defender :ใ ๅทฅไฝๅ็ Shellcode็ๆ ้ฆๅ ๏ผ็ๆไธไธชไบ่ฟๅถๆ ผๅผ็payload๏ผๅฏไปฅไฝฟ็จ HavocใCobaltStrike ๆ msfvenom๏ผ๏ผไพๅฆไฝฟ็จ msfvenom๏ผๅฏไปฅ่ฟๆ ทๅ๏ผๆไฝฟ็จ็payloadไป ็จไบๆผ็คบ ็ฎ็๏ผไฝ ๅฏไปฅไฝฟ็จไปปๆpayload๏ผ๏ผ root@kitploit: msfvenom -p windows/messagebox -f raw -o shellcode.bin...
dark-doh
dark-doh.exe ๅ ฌๅผ็ๆฌ ็ฎ็๏ผ้่ฟ DoH ไธ่ฝฝๆไปถ๏ผๆไธ่ฝฝๅนถๆง่ก shellcode๏ผๅ ฌๅผ็ๆฌไธญๆชๅฎ็ฐ๏ผ ่ฟ่ก็คบไพ๏ผdark-doh.exe file1 download google yourdomain.com ๅทฒๆทปๅ ็จไบ DNS ๅบๅ็ๆ็่พ ๅฉ Python ่ๆฌ๏ผpy-prepzones.py๏ผใ !!! ๅ ่ดฃๅฃฐๆ !!! ไฝ่ ๅฏนๆจๅฆไฝไฝฟ็จ dark-doh.exe ไธๆฟๆ ไปปไฝ่ดฃไปปๅ/ๆไนๅก๏ผ ๆฌไปๅบไธญ็ไธๅๅ ๅฎนไป ไพๆ่ฒๅ็ ็ฉถ็ฎ็ไฝฟ็จ๏ผไฝ่ ๅฏนๆจๅฆไฝไฝฟ็จๆๅ็ฐ็ๆฐๆฎไธๆฟๆ ไปปไฝ่ดฃไปปใ ๅๆดๆฅๅฟ๏ผ dark-doh-v1.0rc-public.exe ๅๅธ๏ผ ๆฐๆฎไธ่ฝฝ ไฝฟ...
BobTheSmuggler
BobTheSmuggler ใฏใคใใฏใขใใใใผใ 2024ๅนด1ๆ15ๆฅ -ใใซใใใกใคใซๅง็ธฎใฎใตใใผใใ่ฟฝๅ ใใใพใใ ใๆ็ตใใคใญใผใ็จใซ่คๆฐใฎใใกใคใซใ็ๆใใใๅ ดๅ๏ผไพ๏ผDLLใตใคใใญใผใใฃใณใฐใใกใคใซใใใซใในใใผใธ้ ไฟกใใกใคใซ๏ผใ'-i'ใชใใทใงใณใงใใฃใฌใฏใใชใในใๆๅฎใงใใใใใซใชใใพใใใใใฃใฌใฏใใชใในใๆๅฎใใใใจใBobTheSmugglerใฏใใฎใใฃใฌใฏใใชๅ ใฎๅ จใใกใคใซใ่ชๅ็ใซใขใผใซใคใใใXORๆๅทๅใใฆใPNG/GIFๅ ้จใซๅใ่พผใฟใพใใ ใใญใธใงใฏใ่ชฌๆ ใใฎใใผใซใฎไฝฟใๆนใ่ฉณใใ็ฅใใใๆนใฏใ็งใฎใใญใฐใใ่ฆงใใ ใใ๏ผBobTheSmuggler:...
SHGenOb
SHGenOB: PIC Cใณใผใใใใฎใทใงใซใณใผใ็ๆใใผใซ ใฏใใใซ SHGenOBใฏใC่จ่ชใง่จ่ฟฐใใใไฝ็ฝฎ็ฌ็ซใณใผใ๏ผPIC๏ผใใใทใงใซใณใผใใ็ๆใใใใใซ่จญ่จใใใPythonใใผในใฎใใผใซใงใใCใณใผใใฎใณใณใใคใซใ.textใปใฏใทใงใณใฎๆฝๅบใใใใณๅฟ ่ฆใซๅฟใใฆXORๆๅทๅใไฝฟ็จใใใทใงใซใณใผใใฎๆๅทๅใ่ชๅๅใใพใใ ใใฎใใญใธใงใฏใใฏใhasherezadeใซใใใใฎ่ณๆใซๅฎๅ จใซๅบใฅใใฆใใพใใ ไฝ็ฝฎ็ฌ็ซใณใผใ๏ผPIC๏ผ SHGenOBใฆใผใถใผใธใฎ้่ฆใชๆณจๆ :...
Dumpy
ๆ่ฟฐ ่ฏฅๅทฅๅ ทๅจๆ่ฐ็จ MiniDumpWriteDump ๆฅ่ฝฌๅจ lsass ๅ ๅญๅ ๅฎนใๆญค่ฟ็จๆ ้ๆๅผๆๅ lsass ็ๆฐ่ฟ็จๅฅๆ๏ผๅนถไฝฟ็จ DInvokers ไฝฟๅ ถๆถๆ่กไธบๆด้พ่ขซๆฃๆตใไธบไบๅจไธ่ฐ็จ OpenProcess ็ๆ ๅตไธ่ทๅพๆๅ lsass ็ๆๆ่ฟ็จๅฅๆ๏ผ็ณป็ปไผ้่ฟ NtQuerySystemInformationใNtDuplicateObjectใNtQueryObject ๅ QueryFullProcessImageNameW ๅๆ็ณป็ปไธญ็ๆๆ่ฟ็จๅฅๆใ ไฝฟ็จ NTFS ไบๅกๅจๅฐๅ ๅญ่ฝฌๅจๅญๅจๅฐ็ฃ็ๆ้่ฟ HTTP ๅ้ไนๅๅฏนๅ ถ่ฟ่กๅผๆๅ ๅฏใ ๅๆถๆฏๆ x86 ๅ x...
Shellcrypt
Shellcrypt ไธไธชๅๆไปถ่ทจๅนณๅฐ็ไพฟๆทๅทฅๅ ท๏ผ็จไบๆททๆท็ปๅฎ็ shellcode ๆไปถ๏ผๅนถ่พๅบไธบๅฏ็ดๆฅ็ฒ่ดดๅฐๆบไปฃ็ ไธญ็ๆ็จๆ ผๅผใ ่ดก็ฎ่ ่ฟไบ่ดก็ฎ่ ๅผๅพๅจ่ฟ้ๅๅบ An00bRektn github twitter โฅ 0xtejas github ๅ ๅฏๆนๆณ Shellcrypt ็ฎๅๆฏๆไปฅไธๅ ๅฏๆนๆณ๏ผๆชๆฅ่ฟไผๆดๅค๏ผ๏ผ AES 128-bit CBC ChaCha20 RC4 Salsa20 XOR ๆฏๆ็่พๅบๆ ผๅผ Shellcrypt ็ฎๅๆฏๆไปฅไธ่พๅบๆ ผๅผ๏ผๆชๆฅ่ฟไผๆดๅค๏ผ๏ผ C C Nim Golang Python Powershell Visual Basic for...
MAL-2026-6765 Malicious code in @marketfront/bannerpopup (npm)
The @marketfront/bannerpopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...
MAL-2026-6786 Malicious code in @marketfront/mychatspreloader (npm)
The @marketfront/mychatspreloader package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and us...
MAL-2026-6772 Malicious code in @marketfront/customdealsfeed (npm)
The @marketfront/customdealsfeed package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...
CVE-2026-33361
In Meari IoT SDK image handling libmrplayer.so as observed in CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label apps = 1.8.x, baby monitor ".jpgx3" files use reversible XOR over only the first 1024 bytes with a predictable key derivation model...
Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices
Cybersecurity researchers have lifted the curtain on a stealthy botnet that's designed for distributed denial-of-service DDoS attacks. Called Masjesu , the botnet has been advertised via Telegram as a DDoS-for-hire service since it first surfaced in 2023. It's capable of targeting a wide range of...
Masjesu Rising: The Commercial IoT Botnet Built for Stealth, DDoS, and IoT Evasion
Masjesu Rising: The Commercial IoT Botnet Built for Stealth, DDoS, and IoT Evasion By Mohideen Abdul Khader F ยท April 7, 2026 Botnet overview The Masjesu botnet, a sophisticated, commercially-run Internet of Things IoT threat, has been operational and evolving since early 2023, continuing into...
czeview-meari-firmware
CZeView / Meari Camera โ Root & Firmware Research Reverse eng...
CVE-2025-59095
The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...
CVE-2025-59095
The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...
CVE-2025-59095
CVE-2025-59095 affects dormakaba Kaba exos 9300 software. Public descriptions in multiple sources indicate that DLLs/binaries (notably Kaba.EXOS.common.dll) use a hard-coded, static cryptoKey with a simple XOR-based encrypt/decrypt routine to process user PINs before storing them in MSSQL. The ro...
EUVD-2025-206357
The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...