steganography

Bild-Steganographie-Tool Einfaches C++ Verschlüsselungs- und Steganographie -Tool, das passwortgeschützte Verschlüsselung verwendet, um den Inhalt einer Datei zu sichern, und diesen dann mithilfe der Least-Significant-Bit-Kodierung in die Pixeldaten eines Bildes einbettet. Für Linux-, MacOS- und...

Hollow

Hollow hollow ist ein Shellcode-Loader-Generator. Sie geben ihm eine rohe Shellcode-Binärdatei und ein Profil, und es gibt einen kompilierten Windows-PE-Loader aus, der Ihren verschlüsselten Shellcode enthält. Erste Schritte Binärdateien sind auf der Releases Seite verfügbar, oder bauen Sie aus d...

AnonX

HINWEIS Das AnonX-Skript basierte auf der öffentlichen API von WeTransfer und funktioniert seit drei Wochen nach seiner Veröffentlichung nicht mehr. “All good things must come to an end, so it’s with a heavy heart and through held-back tears that we must announce that we’ll be retiring our Public...

PhantomFS

PhantomFS Provedor ProjFS. Projeta arquivos onde o conteúdo depende de qual processo os lê. O payload é armazenado criptografado em AES-256-CBC no disco, descriptografado apenas em memória em tempo de execução. Isso não deve contornar nenhum EDR, pois o payload será gravado no disco quando...

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — Laboratório de RCE sem Credenciais no nginx-ui Aviso: Este repositório destina-se exclusivamente a fins educacionais e de pesquisa de segurança autorizada. Todas as técnicas demonstradas aqui devem ser usadas apenas contra sistemas que você possui ou para os quai...

reyee_decrypt

reyeedecrypt Descriptografia adaptativa de firmware e backup de configuração do Ruijie ReyeeOS, e recuperação de senhas em texto claro a partir da configuração. Uso python3 reyeedecrypt.py diretório de saída é detectada automaticamente, com suporte para os seguintes tipos: Entrada| Exemplo ---|--...

Cve-2026-27944-Tools-Exploit

🚀 CVE-2026-27944: Nginx UI Unathenticated Backup Exploit 📌 Beschreibung 27944.py ist ein Exploit-Tool für CVE-2026-27944, das es Angreifern ermöglicht, Backups der Nginx UI ohne Authentifizierung herunterzuladen und zu entschlüsseln. Die Schwachstelle besteht in Nginx UI Versionen 2.3.2 und...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/Antsword - Interaktive Shell HTTP-Hijacking + POST + AES-256-CBC/BASE64 Erkennung -dnslog DNSLog-No-Output-Erkennung Nuclei -poc Schwachstellen-Echo-Erkennung Ausnutzung -exp Interaktive Shell Base64-Echo -exp2 Interaktive Shell HTTP-Hijacking + POST + Base64...

Malicious code in imgbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14218599b46d143fa8e150156864d14d58c327bd8a8816221ac4e8c5cc99350 The package advertises itself as an image bundler, but index.js performs no image bundling. On require, a top-level IIFE reads an AES-256-CBC-encrypt...

MAL-2026-17330 Malicious code in imgbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14218599b46d143fa8e150156864d14d58c327bd8a8816221ac4e8c5cc99350 The package advertises itself as an image bundler, but index.js performs no image bundling. On require, a top-level IIFE reads an AES-256-CBC-encrypt...

Malicious code in stestenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee35b23a60484ee1d468154734cc7cdbc8c7d3cbc81901ab680cb67e46a8c2b6 On require of the package's main entry, dispatchAnalytics reads a payload hidden in the JPEG APP13 marker 0xFFED segment of the bundled dist/stest.jp...

MAL-2026-17309 Malicious code in stestenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee35b23a60484ee1d468154734cc7cdbc8c7d3cbc81901ab680cb67e46a8c2b6 On require of the package's main entry, dispatchAnalytics reads a payload hidden in the JPEG APP13 marker 0xFFED segment of the bundled dist/stest.jp...

cryptr v4.0.0

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

CVE-2026-19806

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

EUVD-2026-68969

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

CVE-2026-19806: Improper Authentication

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

PT-2026-84106

Name of the Vulnerable Software and Affected Versions Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System versions prior to 1.4.53 Description An authentication bypass exists that allows for administrator account takeover. The issue resides in the guest ticket...

CVE-2026-82645

AVideo current commit e01e41ecc and earlier exposes stream credentials through the plugin/Live/view/Liverestreams/getLiveKey.json.php endpoint. Supplying a 'token' request parameter waives both the Live::canRestream access gate and the restream ownership check, causing the endpoint to return any...

CVE-2026-82645 AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token

AVideo current commit e01e41ecc and earlier exposes stream credentials through the plugin/Live/view/Liverestreams/getLiveKey.json.php endpoint. Supplying a 'token' request parameter waives both the Live::canRestream access gate and the restream ownership check, causing the endpoint to return any...

CVE-2026-82645

AVideo current commit e01e41ecc and earlier exposes stream credentials through the plugin/Live/view/Liverestreams/getLiveKey.json.php endpoint. Supplying a 'token' request parameter waives both the Live::canRestream access gate and the restream ownership check, causing the endpoint to return any...