358 matches found
CVE-2023-38831
CVE-2023-38831 A POC demo on CVE-2023-38831 Brief description of vulnerability CVE-2023-38831 is a software vulnerability. The software that was exploited is WinRAR, which is used widely by almost everyone. It is a software that helps different documents or files to make it into small archives zi...
CVE-2024-24576-PoC-Python
CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...
exe2powershell
exe2powershell exe2powershell - exe2bat reborn for modern Windows exe2bat reborn in exe2powershell for modern Windows exe2powershell is used to convert any binary file .exe to a BAT file. The resulting BAT file contains only "echo" command and finally a powershell command to re-create the origina...
CVE-2020-27955-LFS
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
LazySign
LazySign Create fake certs for binaries using windows binaries and the power of bat files Over the years, several cool tools have been released that are capeable of stealing or forging fake signatures for binary files. All of these tools however, have additional dependencies which require...
CVE-2022-21970
CVE-2022-21970 Description Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This vulnerability allows an attacker to execute javascript code on every host without permission, also an attacker can steal local system files, and also he can manipulate the actions against the machi...
bat
Behavioral Adversary Tracer BAT BAT is a realistic, evolving adversary threat model for Linux and Windows. It is not a C2 framework and it is not a rootkit. It is a complete threat simulation platform that integrates C2 communication, kernel-level stealth rootkit modules, userspace evasion,...
CVE-2024-24576-PoC-BatBadBut
CVE-2024-24576-PoC-BatBadBut PoC for CVE-2024-24576 vulnerability "BatBadBut" Information After running the script will ask you for an argument, the argument will be passed the the bat file, if you close the argument with " and after that & you can run any Windows command. For example: helloworld...
CVE-2020-27955-LFS
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
CVE-2020-27955
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
Malicious code in known-sapphire-bat (npm)
Source: amazon-inspector 7f5c57487601510fa17bd4fdc2a898fef2ed6ae680bff22a36705923f5ddd19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jittery-violet-bat (npm)
Source: amazon-inspector 873089d676c3fe0bfd28eed742aa883e61e26b5d112c57843fcf87ca72091fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jelek-rasismem-bat (npm)
Source: amazon-inspector f71fe847eae5152e4ddfe0898f56b10a4c62dda0e02c9cd7201266d6bad3fa8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in icy-sapphire-bat (npm)
Source: amazon-inspector 04e6cb9fe14643d77e337ab99099fc51fbfa24e704234e3672325c14a0972e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in historic-purple-bat (npm)
Source: amazon-inspector abd4f6743c8f2eeb19d293a0518149d120c3145785ed8b89d8463d6f4766c508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in handicapped-amber-bat (npm)
Source: amazon-inspector 74275bb43e600994eba90a00faacd7ece9a298979a3fbd3d186de95ac52e9b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in common-turquoise-bat (npm)
Source: amazon-inspector 24d6b5d70b1d40a7a3393633e01077418815979f98db54132469fba9cd26fb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in amateur-blush-bat (npm)
Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in python-walletlibr-v (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...
