CVE-2024-57366

CVE-2024-57366 Exploit A robust exploit for CVE-2024-57366 that allows remote code execution on vulnerable routers through MAC address validation bypass and command injection. This is a post-authorization exploit that requires the router "Remote Control" feature to be on, and the administrative...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

CVE-2022-4096

CVE 2022 -4096 Amine TITROFINE | January 21, 2023 This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device, which can be controlled through a web interface this is typical for many IoT devices. Many IoT device...

Nanobrok

Nanobrok Web Service Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in...

lgosp-poc

LG On Screen Phone authentication bypass PoC What is LG On Screen Phone? The LG On-Screen Phone application OSP makes it easy to access and control LG’s Android smartphones through a PC. The connection can be established either by using an USB cable or wirelessly through Wi-Fi or Bluetooth. When...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

PyRat

PyRat PyRat es un proyecto de control remoto de código abierto basado en XmlRPC de Python, que incluye un cliente y un servidor también llamado controlador, de ahora en adelante denominado servidor. Declaración: El proyecto es solo para intercambio técnico, no lo utilice con fines comerciales o...

Humax-CLI

Humax-CLI Un cliente de terminal no oficial para Humax IR4000HD con funciones mejoradas. Todo esto surgió de la ingeniería inversa de la aplicación de Android y pronto habrá un artículo 😄 Captura de pantalla Uso : root@kitploit: usage: sendUDP.py -h -i IP -l --try-this --loop -j -b btn btn...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

RATel

RATel Please do not upload to virustotal ! To prevent RATel from being detected by antivirus, please do not upload the payload to TOTAL VIRUS. Each month I will test myself if the payload gets detected by antivirus. So you’ll have a photo every month to prove RAtel discretion. Description RAT-el ...

C2

C2 mediante favicon generado con python, leído con powershell...

SimpleRemoter

SimpleRemoter 简体中文 | 繁體中文 | English ⚠️ Unmaintained & Legal Notice / 停止维护与合规声明 !CAUTION This project is NO LONGER MAINTAINED. Use at your own risk. 本项目已停止维护，不再更新，请自行承担使用风险。 ⚖️ Compliance Reminder / 合规提醒 Legal Use Only: Unauthorized remote access is strictly prohibited. Comply with all local laws...

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

androrat

androrat Herramienta de Administración Remota para Android Androrat es una aplicación cliente/servidor desarrollada en Java Android para el lado del cliente y en Java/Swing para el servidor. El nombre Androrat es una mezcla de Android y RAT Remote Access Tool. Ha sido desarrollado por un equipo d...

covert-tube

covert-tube 通过上传视频到Youtube来远程控制系统的一个程序，使用Python创建视频和监听端，模拟了我读到的一些恶意软件。它允许创建由简单文本、明文二维码或使用AES加密的二维码组成的帧的视频。 注意：此PoC已添加到框架 covert-control 中，该框架还允许通过OneDrive、Google Drive和Telegram实现相同的功能。 如果你的目标是Windows系统，你可能更喜欢C版本：SharpCovertTube（我最近更新了更多）。 创建视频 可以使用 generatevideo.py 创建视频：输入命令并输入"exit"以生成视频。生成的视频默认...

Insanity-Framework

Insanity-Framework THIS PROJECT ARE CLOSED NOW - FEEL FREE TO CONTINUE IT Copyright 2017 Insanity Framework IF 2.0 END Written by: Alisson Moretto - 4w4k3 Special Thanks to Thomas Perkins - Ekultek Insanity Payload consists of encrypting your code and decrypting it in memory, thus avoiding a...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

Manipulating-Web-Agents

Manipulación de agentes web autónomos basados en LLM mediante ataques de inyección indirecta de prompts Con la ubicuidad de las aplicaciones integradas con LLM, investigar los posibles riesgos de seguridad es crucial. Una de las vulnerabilidades más significativas de estos sistemas es su...

blueXploit

blueXploit blueXploit video blueXploit is my own proof-of-concept that reproduces CVE-2023-45866 , the Bluetooth keystroke-injection vulnerability discovered by Marc Newlin. It abuses a flaw in the Bluetooth protocol to inject keystrokes into a target device without pairing , opening the door to...

remote-control

Laravel 远程控制 在不共享凭据的情况下授予用户帐户远程访问权限。 安装 配置 用法 路由 创建远程访问 使用生成的访问令牌 安装 Remote Control 可以通过 Composer 安装： root@kitploit: composer require "katsana/remote-control" 配置 该软件包将自动注册一个服务提供者。 接下来，你需要发布 Remote Control 的配置文件： root@kitploit: php artisan vendor:publish...