CVE-2021-4045

Exploit Title: TP-LINK Tapo c200 1.1.15 - RCE Vendor: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Version: 1.1.15 and below CVE: CVE-2021-4045 Loadable C2 botnet & massexploit Write up of vuln: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce...

public-research

Public Research Open source research and talks on threat intelligence, fingerprinting, and fraud detection. Talks 10/25/2024 - Anti-Fraud W3 Community Group - An Emprical Analysis of Residential Proxies 03/27/2025 - Anti-Fraud W3 Community Group - Mitigating Fingerprint Impersonation 10/23/2025...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

strafer

Strafer Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named "STRAFER" to detect potential infections in the...

bonesi

BoNeSi BoNeSi , the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. What traffic can be generated? BoNeSi generates ICMP, UDP and TCP HTTP flooding attacks from a defined botnet size different IP...

BSF

BSF - Botnet Simulation Framework BSF provides a discrete simulation environment to implement and extend peer-to-peer botnets, tweak their settings and allow defenders to evaluate monitoring and countermeasures . Synopsis In the arms race between botmasters and defenders, the botmasters have the...

CnC-Botnet-in-Python

CnC-Botnet-in-Python C&C Botnet written in Python Description Simple botnet written in Python using fabric. The author is not responsible for the use of this code. Hosts It is possible to load hosts from a file hosts.txt included in the main directory of the project. The default format for this...

public-research

Nokia Deepfield ERT — public research Threat research from the Nokia Deepfield Emergency Response Team ERT, focused on DDoS botnets and related infrastructure. Each directory covers a botnet family with a brief summary and machine-readable indicators of compromise IoCs. This repo consolidates pri...

botnet-hackpack

SIMPLE C&C BOTNET This hackpack will walk you through implementing a basic framework that fundamentally characterizes a botnet. It might help if you've worked with C before. If you liked this tutorial, be sure to star this repo! Note: Don't use anything you learn here for malevolent purposes. Thi...

Xenotix-xBOT

Xenotix-xBOT Xenotix xBOT is a proof of concept cross platform Linux, Windows, Mac bot written in Python that abuse certain Google Services to implement Command & Control Center for the botnet. The Google Apps Data API, Google Forms and Google Spreadsheet is abused to implement C2 for a bot...

DDoS-Ripper

DDoS-Ripper What is a DDoS Attack? A Distributable Denied-of-Service DDOS attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic DDoS attacks achieve effectiveness using multiple compromised computer systems as a source of attack traffic. Search engines m...

strutszeiro

strutszeiro Telegram Bot to manage botnets created with struts vulnerabilityCVE-2017-5638 Dependencies pip install -r requeriments.txt Config root@kitploit: Create a telegram bot, save the API token in config/token.conf Create a telegram group, save the group id in config/group.conf Start python...

Hale

About Hale is a botnet command & control monitor/spy with a modular design to easily develop new modules that monitor new protocols used by C&C servers. Hale comes with IRC and HTTP monitors developed with Twisted to handle scalability of a large amount of connections. Theses modules have...

telnet-iot-honeypot

Disclaimer This project neither supported or in development anymore. It is based on python2 which has reached its EOL in 2020 and uses dependencies which are getting harder to install over time. Use at your own risk! Telnet IoT honeypot 'Python telnet honeypot for catching botnet binaries' This...

buttinsky

Buttinsky Monitoreo de Botnets de Código Abierto Descripción El monitoreo de botnets es una parte crucial del análisis de amenazas y a menudo se descuida debido a la falta de herramientas adecuadas de código abierto. Nuestra herramienta proporcionará un framework de código abierto para el monitor...

JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write

JoomShaper Helix3 template framework versions 1.0 through 3.1.0 for Joomla expose an unauthenticated AJAX handler plgajaxhelix3 accessible via the Joomla comajax component. The onAjaxHelix3 plugin method processes dataaction=save requests without any authentication check or CSRF token validation...

DDOS-RootSec

RootSec Archive Overview of RootSec Archive Welcome to the RootSec Archive , your ultimate resource for DDOS tools, scanners, botnets, exploits, and more. Our archive includes: Mirai Edits: Private and Public Versions QBot Edits: Private and Public Versions Other Botnet Variants: Diverse...

CVE-2022-26134_check

CVE-2022-26134check El script se utiliza para comprobar de forma remota si un servidor de Confluence es vulnerable a la vulnerabilidad CVE-2022-26134. Esta vulnerabilidad es un fallo de ejecución remota de código que permite a un atacante ejecutar código arbitrario en el servidor si se deja sin...

aura-botnet

Aura Botnet Servidor C2 El servidor C2 del botnet utiliza el framework Django como backend. Está lejos de ser el servidor web más eficiente, pero esto se compensa con lo siguiente: Django es extremadamente portable y por lo tanto bueno para propósitos de prueba/educativos. El servidor y la base d...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...