2823 matches found
Adamantium-Thief
🔓 Adamantium-Thief 从基于 Chromium 的浏览器获取：密码、信用卡、历史记录、Cookie、书签、自动填充。 支持 Chrome 80 以上版本！ 需要 Firefox 密码解密器？ 🌿 示例： 🔑 从浏览器获取密码： root@kitploit: Stealer.exe PASSWORDS 💳 从浏览器获取信用卡： root@kitploit: Stealer.exe CREDITCARDS 🕘 从浏览器获取历史记录： root@kitploit: Stealer.exe HISTORY 📑 从浏览器获取书签： root@kitploit: Stealer.ex...
EvilSelenium
EvilSelenium EvilSelenium es un nuevo proyecto que weaponiza Selenium para abusar de navegadores basados en Chromium. Las funcionalidades actuales son: Robar credenciales almacenadas mediante autofill Robar cookies Tomar capturas de pantalla de sitios web Volcar correos de Gmail/O365 Volcar...
DumpBrowserSecrets
DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...
temcrypt
The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...
chromepass
Chromepass - Hackeando contraseñas y cookies guardadas de Chrome Ver demo · Reportar error · Solicitar función Tabla de contenido Acerca del proyecto Detección AV Primeros pasos Requisitos previos Instalación Uso Correo electrónico Errores, fallos y solicitudes de funciones Más información Licenc...
hm-surf
HM-Surf evaluator Evaluates susceptibility to CVE-2024-44133 of common macOS browsers. Also contains the HTML that takes a screenshot and downloads it along with location extraction. Usage - evaluator To run the evaluator, which evaluates CVE-2024-44133 on all common macOS browsers, run:...
IFA
IFA 通过 IndexedDB 进行的磁盘淹没攻击 IFA 是一个概念验证（PoC ），演示了攻击者如何利用主流网页浏览器中的 IndexedDB API 执行磁盘淹没攻击。此攻击特别利用了 IndexedDB 中缺乏限制的特点，允许浏览器在无有效限制的情况下存储数据，从而通过每秒注入数百 MB 的数据快速消耗用户磁盘空间。这可能导致系统性能严重下降、存储耗尽，极端情况下甚至导致系统完全崩溃。 为什么你应该担心？ 在一个我们越来越依赖 Web 应用进行工作和娱乐的世界里，一个能在几分钟内使设备无法使用的漏洞是一个严重的威胁。IFA 揭示了 IndexedDB...
GTranslate < 2.8.65 - Cross-Site Scripting
In the Pro and Enterprise versions of GTranslate 2.8.65, the gtranslaterequesturivar function runs at the top of all pages and echoes out the contents of $SERVER'REQUESTURI'. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable ...
CVE-2017-8641_chakra_Js_GlobalObject
Description described more from site CVE !!Yes Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the conte...
domato
Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...
SharpChromium
SharpChromium Introducción SharpChromium es un proyecto .NET 4.0+ CLR diseñado para recuperar datos de Google Chrome, Microsoft Edge y Microsoft Edge Beta. Actualmente es capaz de extraer: Cookies en formato JSON Historial con las cookies asociadas a cada elemento del historial Inicios de sesión...
cve-2025-4664
CVE-2025-4664 This repository contains a PoC for exploiting CVE-2025-4664, a vulnerability where Chromium-based browsers leak sensitive URL parameters through Link header preload requests. Resources For a detailed explanation of how this exploit works, read the blog post:...
netmap.js
netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...
ChromeKatz
ChromeKatz ChromeKatz è una soluzione per estrarre informazioni sensibili dalla memoria dei browser basati su Chromium. Per ora, ChromeKatz è composto da tre progetti: 1. CookieKatz - Il dump dei cookie 2. CredentialKatz - Deprecato.. per ora 3. ElevationKatz - Ottieni la chiave di decrittazione...
exploits
Exploits La mia collezione personale di exploit: n-days, CTFs, 0days, kernel, browser e un sacco di roba interessante :D...
CVE-2026-78958
A flaw was found in Skia, a 2D graphics library used in Chromium-based browsers. A remote attacker, after compromising the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to obtain sensitive...
CVE-2026-78938
A flaw was found in the V8 JavaScript engine used in Chromium-based browsers. This type confusion vulnerability allows a remote attacker to execute unauthorized code within the browser's security sandbox by tricking a user into visiting a specially crafted web page. This could lead to a compromis...
CVE-2026-50290
SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, CSS value sanitization stripped expression and urljavascript: using simple regex, but could be bypassed with CSS unicode escapes \65xpression, null bytes, or CSS comments exp//ression. These CSS injection...
CVE-2026-50290
SpecifyJS (@asymmetric-effort/specifyjs), a declarative TypeScript UI framework, had a CSS sanitization bypass in its renderToString function (core/src/server/render-to-string.ts:307-311). Prior to v0.2.136 , the regex-based filter for expression( and url(javascript: could be circumvented using C...
