thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

MaccaroniC2

MaccaroniC2 - Empowering Command & Control using AsyncSSH MaccaroniC2 is a proof-of-concept Command and Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok...

ivanti_shell

CVE-2024-21887 Exploitation with Ngrok Reverse Shell This repository provides a Python script designed to demonstrate the exploitation of the CVE-2024-21887 vulnerability in Ivanti Connect Secure gateways. It utilizes Ngrok to establish a reverse shell for educational and ethical testing purposes...

CamPhish

CamPhish Grab cam shots from target's phone front camera or PC webcam just sending a link. What is CamPhish? CamPhish is techniques to take cam shots of target's phone front camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & CloudFlare Tunnel to generate a...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

Grok-backdoor

Grok-backdoor Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the C&C communication. Ngrok-backdoor can generate Windows, Linux and Mac binaries using Pyinstaller. How it works: Ngrok exposes local servers behind NATs and firewalls to the public internet over a secure...

shells

Shellz A script for generating common revshells fast and easy. Especially nice when in need of PowerShell and Python revshells, which can be a PITA getting correctly formatted. PowerShell revshells Shows [email protected], above the prompt and working-directory Has a partial and full...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Docker Ngrok Configuration CVE-2018-11235-Git PoC and tunneling with docker ngrok Build Dockerfile $ docker build -t cve-2018-11235 . Create custom network for ngrok $ docker network create myngroknet Start Git Http Server $ docker run -d -p 8080:80 --net...

CVE-2026-64638

Requirement Node .js Command node evilngrok.js...

malvinci

malvinci This simple script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through ngrok, and send the URL of the server through a Telegram bot. You will need to create a new Telegram BOT. Follow the steps the steps here to create one⚡...

lockphish

Lockphish v2.0 Lockphish es la primera herramienta 07/04/2020 para ataques de phishing en la pantalla de bloqueo, diseñada para obtener credenciales de Windows, PIN de Android y Passcode de iPhone utilizando un enlace https. Tutorial de LockPhish: https://www.kalilinux.in/2020/05/lockphish.html...

MAL-2026-16344 Malicious code in sorrawit-dev-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64040dcfbbdb6ce434caf3cd5bd2baa518cc00970281a69f5309d57a4621233 package.json declares a postinstall lifecycle script that runs automatically on npm install. The script reads /tmp/flag.txt from the installer's...

malvinci

malvinci Dieses einfache Skript stellt eine neue Art von Malware vor, die die Firewall deaktiviert, einen HTTP-Server startet, ihren Port über ngrok weiterleitet und die URL des Servers über einen Telegram-Bot sendet. Du musst einen neuen Telegram-BOT erstellen. Folge den Schritten hier, um einen...

MAL-2026-14036 Malicious code in notafollower1226 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc72e98071e37ff58c3bb327f995c9c586b81a22180a8004b6564026cbc629f The package.json postinstall script auto-executes on npm install. It queries the ECS container metadata endpoint ECSCONTAINERMETADATAURIV4/task to...

Malicious code in notafollower1226 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc72e98071e37ff58c3bb327f995c9c586b81a22180a8004b6564026cbc629f The package.json postinstall script auto-executes on npm install. It queries the ECS container metadata endpoint ECSCONTAINERMETADATAURIV4/task to...

Malicious code in notafollower122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83409fb8c0dc76764a944064219de6a4d59d6b24413db5e36d897681f3183add package.json declares a postinstall lifecycle script that runs automatically on npm install. The script uses childprocess to query the AWS ECS...

MAL-2026-14035 Malicious code in notafollower122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83409fb8c0dc76764a944064219de6a4d59d6b24413db5e36d897681f3183add package.json declares a postinstall lifecycle script that runs automatically on npm install. The script uses childprocess to query the AWS ECS...

Malicious code in notafollower1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c74ec5369dac32115a9f5f257f512fa0a48d2e914b1f18c5178992b0a1604f9 package.json declares a postinstall script that automatically runs on npm install and fetches AWS ECS container task metadata via the...