peeping-tom

peeping-tom Remote keylogger for Windows written in C++ Welcome to the peeping-tom project repo! Peeping-tom is a two-part program with a peeping-client deployed on a target and a toms-server listening for keylogs on the attacker machine. Getting up and running requires a decent amount of set up,...

BlueSpy

BlueSpy - PoC to record audio from a Bluetooth device This repository contains the implementation of a proof of concept to record and replay audio from a bluetooth device without the legitimate user's awareness. The PoC was demonstrated during the talk BSAM: Seguridad en Bluetooth at RootedCON 20...

trunk-recorder

Sponsors Do you find Trunk Recorder and OpenMHz useful? Become a Sponsor to help support continued development and operation! Thank you to everyone who has contributed! 🎉 V5.2 is now... Our Best Release Yet!! Thanks to everyone who contributed, tested and helped collect core dumps! Overview Need...

moukthar

Moukthar Remote adminitration tool for android Demo Features Permissions bypass android 12 below Keylogger Notifications listener SMS listener Phone call recording Image capturing and screenshots Video recording Persistence Read & write contacts List installed applications Download & upload files...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

LiveHiddenCamera

Live Hidden Camera Live Hidden Camera LHC is a library which record live video and audio from Android device without displaying a preview. Motivation I'm working on a research based Android Malware and decided to create a multi function RAT Remote Administration Tool. I was working on Live Stream...

screenpipe

DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe finds work worth automating in your company Continuously record your company's computer work, map workflows, help find work worth automating, and power agents' context https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7...

PasswordFilter

PasswordFilter 2 ways of Password Filter DLL to record the plaintext password More detials: https://3gstudent.github.io/Password-Filter-DLL%E5%9C%A8%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B8%AD%E7%9A%84%E5%BA%94%E7%94%A8...

cve-2024-0305exp

cve-2024-0305exp Available exp for cve-2024-0305, please credit the source if referenced, thank you! 0x01 Product Background Ncast High-Definition Intelligent Recording & Broadcasting System is a product of Guangzhou Encast Electronic Technology Co., Ltd. This system has an RCE vulnerability that...

warpgate

Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

OpenFPC

OpenFPC Full Packet Capture: Open Source and on your own commodity hardware. OpenFPC is a set of scripts that combine to provide a lightweight full-packet network traffic recorder & buffering tool. Its design goal is to allow non-expert users to deploy a distributed network traffic recorder on CO...

CVE-2023-42442

CVE-2023-42442 CVE-2023-42442 JumpServer Session Recording Arbitrary Download Vulnerability Vulnerability Description CVE-2023-42442 is a combination vulnerability involving two bugs in Jumpserver 1. Unauthorized API access leading to session information disclosure 2. Directory permission bypass...

autonomous-offensive-llm-handbook

📖 Read the handbook online : follow the lessons from your first fixture run to an agent with clear limits. The model proposes, the code disposes AUTONOMOUS SECURITY / THE BUILDER'S FIELD MANUAL Read the website · Start the course · Run the lab · Connect your model · The build sequence A practical...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

CVE-2022-26726-POC

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability. The versions I have tested so far are MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, and MacOS 11.6.1. The vulnerability works on all the versions tested on. So what is th...

MSF-screenrecord-on-MacOS

MSF-screenrecord-on-MacOS !!! This vulnerability has been simultaneously discovered or taken by Sudhakar Muthumani of Primefort Private Limited, Khiem Tran and listed as CVE-2022-22600. This is despite I already emailing Apple regarding this back in 2021. Affected Versions As a student, I have...

lights-out

Lights Out This repository contains tools that allow getting software control of the webcam LED on ThinkPad X230 without physical access to the laptop. These were created as a practical demonstration that malware can record video through the webcam without the LED indication. This works via...

CVE-2026-92371

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...