8245 matches found
modelaudit
ModelAudit Secure your AI models before deployment. Static scanner that detects malicious code, potential backdoor indicators, and security vulnerabilities in ML model files — without ever loading or executing them. Full Documentation | Usage Examples | Supported Formats...
vuln-chain-lab
Laboratorio PoC de Bypass de Carga de Archivos + XSS Almacenado Una aplicación web deliberadamente vulnerable que demuestra cómo un bypass de carga de archivos se encadena con XSS almacenado para crear cuentas de administrador puerta trasera, incluso cuando las protecciones CSP, CORS y CSRF están...
CVE-2011-2523
CVE-2011-2523 - vsftpd 2.3.4 Backdoor Exploit This is a Python-based exploit script for the infamous backdoor found in vsftpd version 2.3.4. When triggered, it opens a shell on port 6200 — granting remote command execution as the root user in some vulnerable setups. About the Vulnerability vsftpd...
webshells
Various webshells. Please send add more via pull requests. : ⚠ Usage Warning ⚠ These webshells are not vetted by BlackArch team and may contain backdoors! Always read the source before using any webshells in this repository. Installation On BlackArch you can install a package that will provide...
vscan
vscan Herramienta de escaneo de vulnerabilidades que utiliza nmap y scripts NSE para encontrar vulnerabilidades Esta herramienta aporta un valor adicional al escaneo de vulnerabilidades con nmap. Utiliza scripts NSE que pueden añadir flexibilidad en términos de detección y explotación de...
Kautilya
Kautilya Kautilya is a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests. By nikhilmitt List of Payloads Windows Gather Gather Information Hashdump and Exfiltrate Keylog and Exfiltrate Sniffer WLAN keys dump Get...
BetterBackdoor
BetterBackdoor Una puerta trasera es una herramienta utilizada para obtener acceso remoto a una máquina. Normalmente, las utilidades de puerta trasera como NetCat tienen dos funciones principales: canalizar la entrada remota a cmd o bash y devolver la respuesta. Esto es útil, pero también es...
chromepass
Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...
NXcrypt
NXcrypt NXcrypt is a polymorphic 'python backdoors' crypter written in python by Hadi Mene h4d3s . The output is fully undetectable . NXcrypt can inject malicious python file into a normal file with multi-threading system . Run it with superuser's permissions . NXcrypt output is Fully undetectabl...
backcookie
backcookie Small backdoor using cookie. ========== root@kitploit: root@kitploit: Example one: python backcookie.py -u http://target.com/shell.php -c namecookie root@kitploit: Example two: python backcookie.py --url http://target.com/shell.php --cookie namecookie Custom command binfo, You get...
CVE-2011-2523
CVE-2011-2523 These are notes for creating the attack methodology in a controlled environment. It is assumed that the exercise is black-box, so I have no knowledge of the victim system. 1. Download the necessary ISOs, both Metasploitable2 and Kali or any other. 2. Important: the environment is...
TheFatRat
TheFatRat Una Herramienta Masiva de Explotación TheFatRat es una herramienta de explotación que compila un malware con un payload famoso, y luego el malware compilado puede ejecutarse en Linux, Windows, Mac y Android. proporciona una forma fácil de crear backdoors y payloads que pueden eludir la...
TheFatRat
TheFatRat A Massive Exploiting Tool TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus...
Powershell-RAT
Powershell-RAT Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends the information to an attacker as an e-mail...
Awesome-MoAI-Security
Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Mobile on-device AI systems execute AI models locally through ML frameworks such as LiteRT/TFLite , Core ML , ExecuTorch , ONNX , and hardware-backed accelerators. This repo tracks the security...
canisrufus
CanisRufus Un backdoor sigiloso para Windows basado en Python que utiliza GitHub como servidor de comando y control. Requisitos Python 2.x módulo pygithub3 módulo PyCrypto módulo WMI módulo Enum34 módulo Netifaces módulo pypiwin32 Características Mensajes de transporte cifrados AES + hashing SHA2...
changeme
changeme Un escáner de credenciales por defecto. Acerca de changeme retoma donde los escáneres comerciales lo dejan. Se centra en detectar credenciales por defecto y puerta trasera, no necesariamente credenciales comunes. Su modo predeterminado es escanear credenciales HTTP por defecto, pero tien...
psad
psad - Detección de intrusiones con registros de iptables Introducción El detector de ataques de escaneo de puertos psad es un demonio ligero del sistema escrito en Perl, diseñado para trabajar con el código de cortafuegos Linux iptables/ip6tables/firewalld para detectar tráfico sospechoso como...
BPFDoor-controller-source
BPFDoor-controller-source Código fuente de una variante reciente del controlador BPFDoor Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Corregido: bpfdoorcontroller.c Ayudante de original a corregido: formatfix.py Compilar: root@kitploit: $ apt install libssl-dev $ gcc...