ivanti_shell

Exploitation de CVE-2024-21887 avec Reverse Shell Ngrok Ce dépôt fournit un script Python conçu pour démontrer l'exploitation de la vulnérabilité CVE-2024-21887 dans les passerelles Ivanti Connect Secure. Il utilise Ngrok pour établir un reverse shell à des fins éducatives et de tests éthiques...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Configuration Docker Ngrok CVE-2018-11235-Git PoC et tunnellisation avec docker ngrok Construire le Dockerfile root@kitploit: $ docker build -t cve-2018-11235 . Créer un réseau personnalisé pour ngrok root@kitploit: $ docker network create myngroknet Démarrer le...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

Grok-backdoor

Grok-backdoor Grok-backdoor एक सरल पायथन-आधारित बैकडोर है, जो C&C संचार के लिए Ngrok टनल का उपयोग करता है। Ngrok-backdoor Pyinstaller का उपयोग करके Windows, Linux और Mac बाइनरी बना सकता है। यह कैसे काम करता है: Ngrok NAT और फ़ायरवॉल के पीछे स्थानीय सर्वरों को एक सुरक्षित टनल के माध्यम से सार्वजनि...

CamPhish

CamPhish लक्ष्य के फोन के फ्रंट कैमरा या पीसी वेबकैम से सिर्फ एक लिंक भेजकर कैम शॉट्स लें। CamPhish क्या है? CamPhish एक तकनीक है जो लक्ष्य के फोन के फ्रंट कैमरा या पीसी वेबकैम से कैम शॉट्स लेती है। CamPhish बिल्ट-इन PHP सर्वर पर एक फर्जी वेबसाइट होस्ट करता है और एक लिंक जनरेट करने के लिए ngrok औ...

MaccaroniC2

MaccaroniC2 - Potenziare il Command & Control usando AsyncSSH MaccaroniC2 è un proof-of-concept framework di Command and Control che utilizza la potente libreria Python AsyncSSH che fornisce un'implementazione client e server asincrona del protocollo SSHv2 e utilizza il wrapper PyNgrok per...

shells

Shellz Uno script per generare rapidamente e facilmente le comuni revshell. Particolarmente utile quando servono revshell PowerShell e Python, che possono essere un vero incubo da formattare correttamente. Revshell PowerShell Mostra [email protected], sopra il prompt e la directory di...

lockphish

Lockphish v2.0 Lockphish ist das erste Tool 07.04.2020 für Phishing-Angriffe auf dem Sperrbildschirm, das dazu entwickelt wurde, Windows-Anmeldeinformationen, Android-PIN und iPhone-Passcode über einen HTTPS-Link zu erbeuten. LockPhish Anleitung: https://www.kalilinux.in/2020/05/lockphish.html...

browser-crash-tool

Browser Crash Tool - Kali Panoramica Questo strumento sfrutta una vulnerabilità in iOS WebKit CVE-2020-27950 utilizzando il modulo ausiliario webkitbackdropfilterblur di Metasploit. Ma sembra funzionare su tutti i browser dopo alcuni test: manda in crash il browser di destinazione caricando una...

CVE-2026-64638

Requisito Node .js Comando node evilngrok.js...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

malvinci

malvinci Dieses einfache Skript stellt eine neue Art von Malware vor, die die Firewall deaktiviert, einen HTTP-Server startet, ihren Port über ngrok weiterleitet und die URL des Servers über einen Telegram-Bot sendet. Du musst einen neuen Telegram-BOT erstellen. Folge den Schritten hier, um einen...

Malicious code in env-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faefbcd9110b5e08b469d72d6541875ba4e2702c4490d1a24c37b313160f86b env-local presents itself as a dotenv-compatible.env loader README, keywords, and API mirror motdotla/dotenv, but lib/main.js unconditionally require...

Malicious code in numpyp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ce16c4710dfddc439c30ec2fc190001171f79fcd66f718ad358a43ecdf876 Package name numpyp is a one-character edit of numpy top-1 PyPI package and PKG-INFO advertises it as 'the simplest module for quick work with files'...

Malicious code in kuaishou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1d5daf09cc7bfff164e60bf5abd0a1b374b5bb616f0a78cac8f6c6ea613608 The package's prepare lifecycle script, which runs automatically on npm install, collects host, user, and platform identifiers along with the full...

MAL-2026-10416 Malicious code in kuaishou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1d5daf09cc7bfff164e60bf5abd0a1b374b5bb616f0a78cac8f6c6ea613608 The package's prepare lifecycle script, which runs automatically on npm install, collects host, user, and platform identifiers along with the full...

Malicious code in nonenull1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...

MAL-2026-10090 Malicious code in nonenull1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...

MAL-2026-7024 Malicious code in none123s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28e7ef260830adb9561488c487960b12e00bd6939daf8ed8e3a239ec9530699 package.json declares a prepare lifecycle script node index.js || true that auto-executes on npm install. index.js reads canonical installer-secret...