keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL TO ALL // APPLIED HACKING KeySweeper KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back over GSM all keystrokes from any Microsoft wireless...

Xenotix-Python-Keylogger

Xenotix Python Keylogger for Windows IMPORTANT: PROJECT DEVELOPMENT AND SUPPORT IS DISCONTINUED usage: xenotixpythonlogger.py mode optional mode: local: store the logs in a file keylogs.txt remote: send the logs to a Google Form. You must specify the Form URL and Field Name in the script. email:...

-BuL

DEDSECBKIF DEDSECBKIF 是一款针对 Android、Linux 和 iOS 的按键注入工具。借助 CVE-2023-45866，它赋予用户对目标系统前所未有的控制能力，实现从按键注入到高级系统操作等多种功能。 描述 DEDSECBKIF 是一款强大的蓝牙漏洞利用工具，利用 CVE-2023-45866...

CVE-2023-48034

CVE-2023-48034 He descubierto un cifrado débil utilizado en el protocolo inalámbrico del teclado inalámbrico Acer SK-9662 ID FCC: H4IKB9662. Este cifrado débil permite a un atacante monitorizar y registrar fácilmente las pulsaciones de teclas, así como inyectar pulsaciones arbitrarias. Introducci...

BadBlue

BadBlue Windows CVE-2024-21306 BadBlue implementation Using DuckyScript Unauthenticated Peering Leading to Code Execution Using HID Keyboard This is an implementation of the CVE discovered by marcnewlin And some code from BlueDucky Introduction BadBlue is a powerful tool for exploiting a...

RustyInjector

⚠️ Descargo de responsabilidad: Solo para fines de investigación y educativos Este proyecto es una Prueba de Concepto PoC que demuestra la inyección de pulsaciones de teclado por Bluetooth, reimplementada en Rust. Está destinado estrictamente a fines educativos y de investigación en seguridad. No...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE An optimized Python 3 Proof-of-Concept PoC exploit for WiFi Mouse Server v1.7.8.5. This script leverages an inherent protocol vulnerability to achieve Remote Code Execution RCE via automated keystroke injection. This version has been explicitly modified and tuned f...

CVE-2022-26726-POC

CVE-2022-26726 受影响版本 作为一名学生，我能够测试此漏洞的设备有限。我目前测试过的版本包括 MacOS 12.3.1、MacOS 12.3、MacOS 12.0、MacOS 10.15.7 和 MacOS 11.6.1。该漏洞在所有测试版本上均有效。 那么漏洞是什么？ 影响：恶意应用程序可能能够绕过某些隐私偏好设置 描述：当可执行文件在运行时被删除，该进程能够绕过屏幕录制以及某些辅助功能设置的限制，即按键注入（使用 metasploit）。 可能的原因：macOS 无法找到该进程父可执行文件的权限，因此不会阻止屏幕录制。然而，令人困惑的是，摄像头和麦克风仍然被正确限制。...

presentation-clickers

Presentation Clickers Tenía ganas de hacer un poco de ingeniería inversa de RF, así que pedí algunos clickers de presentación y me divertí un poco. Esto es un fork de nrf-research-firmware que escribí hace unos años en Bastille. He añadido soporte para algunos transceptores/protocolos nuevos, e...

[SECURITY] [DLA 4780-1] urwid security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4780-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 15, 2026 https://wiki.debian.org/LTS -...

Malicious code in @biz44/id99-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

Malicious code in @biz44/id10-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

Exploit for Improper Authentication in Necta Wifi_Mouse_Server

WiFi Mouse Server 1.7.8.5 - RCE OSCP Optimized An optimized...

CVE-2026-49864: Improper Neutralization of Input During Web Page Generation

wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...

Malicious code in env-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faefbcd9110b5e08b469d72d6541875ba4e2702c4490d1a24c37b313160f86b env-local presents itself as a dotenv-compatible.env loader README, keywords, and API mirror motdotla/dotenv, but lib/main.js unconditionally require...

Malicious code in chaintest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9567c10f25971b44c76d2a2609ce347c2d03d4d600520cd4bfc75a5001552c3c chaintest 0.1.0 on PyPI could not be fully characterized from the available artifacts. No concrete a static rule matches and no traced code evidence...

blueXploit — Updated!

blueXploit blueXploit video blueXploit is my own proof-of-concept that reproduces CVE-2023-45866 , the Bluetooth keystroke-injection vulnerability discovered by Marc Newlin. It abuses a flaw in the Bluetooth protocol to inject keystrokes into a target device without pairing , opening the door to...

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Source code for the Flying Eagle Android remote access trojan RAT framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake "公安一网通办" Public...

CVE-2026-9323

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

CVE-2026-9323

The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and t...