twittor

Twittor 트위터직접 메시지를 명령 및 제어 서버로 사용하는 은밀한 Python 기반 백도어입니다. 이 프로젝트는 Gmail 계정을 사용하여 동일한 작업을 수행하는 Gcat에서 영감을 받았습니다. 설정 이 작업이 작동하려면 다음이 필요합니다: 트위터 계정 전용 계정을 사용하세요! 개인 계정을 사용하지 마세요! 읽기, 쓰기 및 직접 메시지 액세스 수준으로 트위터에 앱 등록 의존성 설치: root@kitploit: $ pip install -r requirements.txt 이 저장소에는 두 개의 파일이 있습니다:...

NXcrypt

NXcrypt NXcrypt는 Hadi Meneh4d3s가 Python으로 작성한 다형성 'Python 백도어' 크립터입니다. 출력물은 완전히 탐지되지 않습니다. NXcrypt는 멀티스레딩 시스템을 통해 일반 파일에 악성 Python 파일을 주입할 수 있습니다. 슈퍼유저 권한으로 실행하세요. NXcrypt 출력물은 완전히 탐지되지 않습니다. 백도어링 모듈: 암호화 모듈 사용법 : sudo ./NXcrypt.py --file=backdoor.py --output=outputbackdoor.py backdoor.py를 암호화하고 ...

ReverseHttp

ReverseHttp http post/get リクエストを使用して通信する Python バックドア 要件 Python 2.7 Cherrypy pip install cherrypy Requests pip install requests 使い方: リスナースクリプトを起動し、次にコントローラーを起動し、バックドアファイルを送信して接続を待ちます。 スクリーンショット...

Grok-backdoor

Grok-backdoor Grok-backdoor는 Python 기반의 간단한 백도어로, C&C 통신에 Ngrok 터널을 사용합니다. Ngrok-backdoor는 Pyinstaller를 사용하여 Windows, Linux 및 Mac 바이너리를 생성할 수 있습니다. 작동 방식: Ngrok는 NAT 및 방화벽 뒤에 있는 로컬 서버를 보안 터널을 통해 공용 인터넷에 노출합니다. Ngrok는 고유한 포트 번호를 통해 맬웨어 로컬 리스너 포트와 ngrok 서버 공용 IP 간의 터널을 설정합니다. 공격자는 Ngrok 공용 IP와 고유 포...

Powershell-RAT

Powershell-RAT Gmail을 사용하여 데이터를 이메일 첨부 파일로 유출하는 Python 기반 백도어입니다. 이 RAT는 레드 팀 작전에서 Windows 시스템을 백도어하는 데 도움이 됩니다. 사용자 활동을 화면 캡처로 추적하고 정보를 이메일 첨부 파일로 공격자에게 전송합니다. 참고: 이 코드는 안티바이러스AV 소프트웨어에 완전히 탐지되지 않습니다FUD. 이 프로젝트는 불법적인 목적이나 권한이 없는 시스템 해킹에 사용되어서는 안 되며, 교육 목적과 실험을 위한 용도로만 사용해야 합니다. 이 도구에 대한 제안이나 아이디...

Wormy

Wormy - チャレンジ このリポジトリでは、暇なときにpython3でいくつかの関数を書き、あらゆるpythonバックドアに「ワームのような拡散機能」を追加する予定です。 完成したら、本物のワームにします ToDoリスト : 1ドライバに拡散、スタートアップに追加、継続的なチェック✓ 2Pythonスクリプトへのインジェクションで拡散 ✓ 3ZIPファイルに拡散 ✓ 4共有フォルダに拡散 ✘ 5LANに拡散 ✘ 6USBに拡散 ✘ 7p2p、skype、hangoutsでの拡散を試みる ✘ 8オンラインで自身のコピーを作成し、拡散に使用する ✘ 9...まだ考え中 :D...

gcat

Gcat Gmailをコマンド＆コントロールサーバーとして使用するステルス型のPythonベースのバックドア このプロジェクトは、Benjamin Donnellyによる元のPoCコードに触発されたものです。 これはPoCコードです... ...組織がこうしたタイプの攻撃に対する防御をテストするために公開されたものです。それらを検出するには、RITAのようなプロジェクトを参照してください。 このプロジェクトのより最新でメンテナンスされたバージョンについては、GDogを参照してください。 セットアップ これを機能させるには以下が必要です:...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

Malicious code in nrwl.angular-console (VSCode:https://open-vsx.org)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 12636eadc931d19fc68ca6d30f5397404c6b782a67537c770c944ed9337a4125 The compromised version of the Nx Console VS Code extension contains malicious code injected into its main execution file. When a develope...

MAL-2026-5161 Malicious code in nrwl.angular-console (VSCode)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 12636eadc931d19fc68ca6d30f5397404c6b782a67537c770c944ed9337a4125 The compromised version of the Nx Console VS Code extension contains malicious code injected into its main execution file. When a develope...

MAL-2026-5162 Malicious code in nrwl.angular-console (VSCode:https://open-vsx.org)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 12636eadc931d19fc68ca6d30f5397404c6b782a67537c770c944ed9337a4125 The compromised version of the Nx Console VS Code extension contains malicious code injected into its main execution file. When a develope...

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

Cybersecurity researchers have flagged a compromised version of the Nx Console extension that was published to the Microsoft Visual Studio Code VS Code Marketplace. The extension in question is rwl.angular-console version 18.95.0, a popular user interface and plugin for code editors like VS Code,...

Malicious code in trickery (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3ad5df28c8d5f5afa377d6b54a7eac1d3110610783c7e62fbd084a0bd49baac5 Package contains code to install a backdoor - and additionally to a user-controlled backdoor, it also installs the second, with own C2 server. It's not...

Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia

The China-based cybercrime group known as Silver Fox aka Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne has been linked to a new campaign targeting organizations in Russia and India with a new malware called ABCDoor. The activity involved using phishing emails that...

New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEPDOOR that comes with capabilities to establish persistent access and harvest a wide range of sensitive information from compromised hosts. "The intrusion chain begins with execution of a batc...

Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses

ViperTunnel is a Python-based backdoor linked to DragonForce ransomware that targets businesses using Windows servers across the US and the UK...

Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor

New research from Broadcom's Symantec and Carbon Black Threat Hunter Team has discovered evidence of an Iranian hacking group embedding itself in several U.S. companies' networks, including banks, airports, non-profit, and the Israeli arm of a software company. The activity has been attributed to...

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Cisco on Thursday released security updates for a maximum-severity security flaw impacting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, nearly a month after the company disclosed that it had been exploited as a zero-day by a China-nexus advanced...

PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces

The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of new cyber attacks targeting its defense forces with malware known as PLUGGYAPE between October and December 2025. The activity has been attributed with medium confidence to a Russian hacking group tracked as Void...

CVE-2022-43305

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0...