Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

PasswordFilter

PasswordFilter 2 ways of Password Filter DLL to record the plaintext password More detials: https://3gstudent.github.io/Password-Filter-DLL%E5%9C%A8%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B8%AD%E7%9A%84%E5%BA%94%E7%94%A8...

LiveHiddenCamera

Live Hidden Camera Live Hidden Camera LHC is a library which record live video and audio from Android device without displaying a preview. Motivation I'm working on a research based Android Malware and decided to create a multi function RAT Remote Administration Tool. I was working on Live Stream...

peeping-tom

peeping-tom Remote keylogger for Windows written in C++ Welcome to the peeping-tom project repo! Peeping-tom is a two-part program with a peeping-client deployed on a target and a toms-server listening for keylogs on the attacker machine. Getting up and running requires a decent amount of set up,...

moukthar

Moukthar Remote adminitration tool for android Demo Features Permissions bypass android 12 below Keylogger Notifications listener SMS listener Phone call recording Image capturing and screenshots Video recording Persistence Read & write contacts List installed applications Download & upload files...

trunk-recorder

Sponsors Do you find Trunk Recorder and OpenMHz useful? Become a Sponsor to help support continued development and operation! Thank you to everyone who has contributed! 🎉 V5.2 is now... Our Best Release Yet!! Thanks to everyone who contributed, tested and helped collect core dumps! Overview Need...

OpenFPC

OpenFPC Full Packet Capture: Open Source and on your own commodity hardware. OpenFPC is a set of scripts that combine to provide a lightweight full-packet network traffic recorder & buffering tool. Its design goal is to allow non-expert users to deploy a distributed network traffic recorder on CO...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

warpgate

Warpgate es un host bastión inteligente y totalmente transparente para SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP y VNC que no requiere una aplicación cliente ni un wrapper de SSH. Configúralo en tu DMZ, añade cuentas de usuario y asígnalas fácilmente a hosts y URLs específicos dentro de la...

cve-2024-0305exp

cve-2024-0305exp Available exp for cve-2024-0305, please credit the source if referenced, thank you! 0x01 Product Background Ncast High-Definition Intelligent Recording & Broadcasting System is a product of Guangzhou Encast Electronic Technology Co., Ltd. This system has an RCE vulnerability that...

screenpipe

English | 简体中文 | 日本語 | Français | Español | Português BR | Deutsch | Українська screenpipe 桌面的 24/7 记忆 开源版 rewind。100% 本地运行。数据完全属于你。 这是什么？ screenpipe 全天候录制你的屏幕和音频，所有数据存储在本地，让你将数字历史与 AI 连接起来。 root@kitploit: ┌─────────────────────────────────────────┐ │ 屏幕 + 音频 → 本地存储 → AI │...

BlueSpy

BlueSpy - PoC para grabar audio de un dispositivo Bluetooth Este repositorio contiene la implementación de una prueba de concepto para grabar y reproducir audio de un dispositivo Bluetooth sin que el usuario legítimo lo perciba. La PoC fue demostrada durante la charla BSAM: Seguridad en Bluetooth...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

CVE-2023-42442

CVE-2023-42442 CVE-2023-42442 JumpServer Session Recording Arbitrary Download Vulnerability Vulnerability Description CVE-2023-42442 is a combination vulnerability involving two bugs in Jumpserver 1. Unauthorized API access leading to session information disclosure 2. Directory permission bypass...

autonomous-offensive-llm-handbook

El modelo propone, el código dispone Un arnés determinista para agentes ofensivos autónomos. El modelo sigue siendo probabilístico. La aplicación anfitriona es dueña de la autorización, las acciones permitidas, los registros de evidencia y la aceptación. Reejecutar entradas congeladas y la políti...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...

CVE-2022-26726-POC

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability. The versions I have tested so far are MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, and MacOS 11.6.1. The vulnerability works on all the versions tested on. So what is th...

MSF-screenrecord-on-MacOS

MSF-screenrecord-on-MacOS !!! Esta vulnerabilidad ha sido descubierta o tomada simultáneamente por Sudhakar Muthumani de Primefort Private Limited, Khiem Tran y listada como CVE-2022-22600. Esto a pesar de que ya había enviado un correo a Apple sobre esto en 2021. Versiones afectadas Como...

PT-2026-88963

TL;DR. The FortiPAM Chrome extension 1M+ users, used for Privileged Access Management, allowed any site to set the browser's proxy for the session, alongside allowing any site to create a new tab and send screen recordings of it to an attacker's server. That makes for trivial phishing attacks whi...

lights-out

Luces apagadas Este repositorio contiene herramientas que permiten obtener control por software del LED de la cámara web de un ThinkPad X230 sin acceso físico al portátil. Fueron creadas como una demostración práctica de que el malware puede grabar vídeo a través de la cámara web sin que el LED l...