covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

lazywarden

Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader — это форк InlineExecute-Assembly для загрузки .NET-сборок и перенаправления вывода в mailslot. Я переписал его в автономный загрузчик со следующими реализациями: AES-шифрование полезной нагрузки Поддержка бесфайловой полезной нагрузки Бесшовный обход AMSI и...

covert-tube

covert-tube A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption...

TinkererShell

TinkererShell شل عكسي بسيط مكتوب بلغة بايثون 3.7 للمتعة فقط. في الواقع، يدعم نظامي ويندوز ولينكس، ويتضمن بعض الميزات الأساسية مثل تسجيل ضغطات المفاتيح والاتصالات المشفرة بـ AES. أنظمة التشغيل المدعومة: Windows Linux OSX الوظائف والخصائص: اتصال عكسي. اتصالات مشفرة بـ AES. متعدد الخيوط. دعم اتصال ع...

CVE-2026-85147

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...

AVIator

AviAtor porté sur NETCore 5 avec une interface utilisateur mise à jour AV|Ator À propos ://nom AV : AntiVirus Ator : est un épéiste, alchimiste, scientifique, magicien, érudit et ingénieur, capable parfois de produire des objets à partir de rien https://en.wikipedia.org/wiki/Ator À propos...

EUVD-2026-70869

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...

CVE-2026-85147 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...

Rootsmart-v2.0

Rootsmart 2.0 مع cve-2019-2215 + برنامج الفدية إخلاء مسؤولية هذا المشروع مخصص للأغراض التعليمية فقط. يستخدم هذا المشروع كودًا من rkshrksh/2048-Game و kangtastic/cve-2019-2215. وصف المشروع هذا المشروع هو جزء من وحدة أمن الأجهزة المحمولة في معهد سنغافورة للتكنولوجيا. تم إنجاز المشروع في غضون 6...

Lime-RAT

Obsolète. Archivez-le au lieu de le supprimer LimeRAT v0.1.9 Outil d'administration à distance pour Windows Description RAT simple mais puissant pour machines Windows. Ce projet est simple et facile à comprendre. Il devrait vous donner une connaissance générale des malwares .NET et de leur...

CVE-2025-59287

Exploit RCE CVE-2025-59287 WSUS Exploit automatisé pour la vulnérabilité d'exécution de code à distance non authentifiée de Windows Server Update Services WSUS. Détails de la vulnérabilité Identifiant CVE : CVE-2025-59287 Score CVSS : 9,8 Critique Vecteur d'attaque : Réseau Authentification :...

cve-2025-59287

CVE-2025-59287 - مجموعة أدوات استغلال WSUS بواسطة adel-h4x0a ⚠️ لأغراض تعليمية واختبار مرخص فقط ⚠️ نظرة عامة توضح هذه المجموعة استغلال CVE-2025-59287، وهي ثغرة تنفيذ تعليمات عن بعد في خدمة تحديثات Windows Server WSUS. المكونات 1. وحدة التشفير cve-2025-59287-encr.py · تشفير الحمولة AES لاتصالات WSUS...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + Ransomware Avertissement Ce projet est uniquement à des fins éducatives. Ce projet utilise du code provenant de rkshrksh/2048-Game et de kangtastic/cve-2019-2215. Description du projet Ce projet fait partie du module Sécurité Mobile du Singapore Institute of...

Shellcrypt

Shellcrypt Un outil de qualité de vie, mono-fichier et multiplateforme, pour obscurcir un fichier de shellcode donné et le produire dans un format utile à coller directement dans votre code source. Contributeurs Ces personnes sont listées ici parce qu'elles le méritent An00bRektn github twitter ♥...

Steganography-Online-Codec-JavaScript

SDK Steganography Online Codec per JavaScript e NPM Steganographic Online Codec ti consente di nascondere un messaggio crittografato con password all'interno di immagini e foto utilizzando l'algoritmo di crittografia AES con una chiave derivata a 256 bit PBKDF2. Puoi usarlo gratuitamente su:...

Malicious code in emoji-prints-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163576a0a8b626c88261c8cc54c5049d981015c80145ad36e2710fff5014afbe The package advertises itself as a colorized logger, but dist/index.js requires./logger, which at module load AES-256-CBC-decrypts a hardcoded...

ANT-2026-6FH6D5TF · supabase/supabase · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6FH6D5TF: Hardcoded Realtime tenant-credential encryption key with no override In docker/docker-compose.yml the...

CVE-2026-57262

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...

Malicious code in dateuuidv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15649ce278832166c0fc4b80206329a54347bf748b207c088308e72a31f72f1 The package advertises itself as a UUID v7 generator, but its main entry loads lib/bootstrap.js which unconditionally invokes extractDateISO at requi...