Invoke-PSImage

Invoke-PSImage Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute Invoke-PSImage takes a PowerShell script and encodes the bytes of the script into the pixels of a PNG image. It generates a oneliner for executing either from a file of from the web. It can...

exfilkit

exfilkit 데이터 유출 탐지 기능 테스트를 위한 유틸리티 설명 보안 제품의 탐지 기능을 테스트하기 위한 데이터 유출 유틸리티입니다. 당연히 합법적인 목적으로만 사용해야 합니다. 유출 방법 /etc/shadow - HTTP GET 요청 서버 ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETServer -lp 80 -o output.log 클라이언트 $ ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETClient -...

EmbedPayloadInPng

EmbedPayloadInPng Embed a payload within a PNG file by splitting the payload across multiple IDAT sections. Each section is encrypted individually using its own 16-byte key with the RC4 encryption algorithm. Quick Links Maldev Academy Home Maldev Academy Syllabus Maldev Academy Pricing...

Advanced Python Payload Encryption Framework with Hybrid Cryptography Steganography and Anti‑Debugging

This Python program implements an advanced payload protection framework that combines multiple security and obfuscation techniques to encrypt, package, and distribute Python code. The framework supports hybrid encryption, multi‑key protection, anti‑debugging checks, and optional steganographic...

Rhadamanthys Stealer Evolves: Adds Device Fingerprinting, PNG Steganography Payloads

The threat actor behind Rhadamanthys has also advertised two other tools called Elysium Proxy Bot and Crypt Service on their website, even as the flagship information stealer has been updated to support the ability to collect device and web browser fingerprints, among others. "Rhadamanthys was...