Humax-CLI

Humax-CLI An unofficial Humax IR4000HD terminal client with enhanced features. This all came from reversing the android app and there will be an article ASAP 😄 Screenshot Usage : root@kitploit: usage: sendUDP.py -h -i IP -l --try-this --loop -j -b btn btn ... optional arguments: -h, --help show...

Nanobrok

Nanobrok Web Service Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in...

remote-control

Remote Control for Laravel Grant remote access to user account without sharing credentials. Installation Configuration Usages Routing Creating Remote Access Using Generated Access Token Installation Remote Control can be installed via composer: root@kitploit: composer require...

lgosp-poc

LG On Screen Phone authentication bypass PoC What is LG On Screen Phone? The LG On-Screen Phone application OSP makes it easy to access and control LG’s Android smartphones through a PC. The connection can be established either by using an USB cable or wirelessly through Wi-Fi or Bluetooth. When...

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

Insanity-Framework

Insanity-Framework THIS PROJECT ARE CLOSED NOW - FEEL FREE TO CONTINUE IT Copyright 2017 Insanity Framework IF 2.0 END Written by: Alisson Moretto - 4w4k3 Special Thanks to Thomas Perkins - Ekultek Insanity Payload consists of encrypting your code and decrypting it in memory, thus avoiding a...

C2

C2 via python generated favicon, read with powershell...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

covert-tube

covert-tube Программа для удаленного управления системами путем загрузки видео на YouTube с использованием Python для создания видео и прослушивателя, имитирующая некоторые вредоносные программы, о которых я читал. Она позволяет создавать видео с кадрами, состоящими из простого текста, QR-кодов с...

covert-control

covert-control Удаленное управление системами путем загрузки файлов в Google Drive, OneDrive, YouTube или Telegram с помощью Python для создания файлов и прослушивателей. Позволяет создавать текстовые файлы, изображения, аудио или видео с командами в открытом виде или зашифрованными с помощью AES...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

RATel

RATel Please do not upload to virustotal ! To prevent RATel from being detected by antivirus, please do not upload the payload to TOTAL VIRUS. Each month I will test myself if the payload gets detected by antivirus. So you’ll have a photo every month to prove RAtel discretion. Description RAT-el ...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

PCShare

PCShare is a powerful remote control software that can monitor the target machine's screen, registry, file system, etc. 1. Software Usage Introduction: 2. Start PcShare.exe, which is the main program of the control end. This program will listen for connections from the controlled end on port 8080...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

AmzWord

AmzWord an automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography Thanks to the following github repository, we referenced and modified part of the code to integrate and implement our work: gdog follina virtual-reality 中文README请看这里 Requirements gdog： Python 2....

Manipulating-Web-Agents

Manipulating Autonomous LLM-based Web Agents with Indirect Prompt Injection Attacks With the ubiquity of LLM-integrated applications, investigating potential security risks is crucial. One of the most significant vulnerabilities in these systems is their susceptibility to adversarial attack via...

reinschauer

Reinschauer Una PoC per controllare da remoto macchine Windows tramite Websockets. Consulta il mio blog per un writeup. Può essere eseguito come eseguibile Go, eseguibile .NET/C e in memoria usando BOF.NET e Cobaltstrike. Il traffico può essere tunnelato tramite una connessione Beacon interattiva...

CVE-2023-21823

CVE-2023-21823 Reverse Shell per Windows Questo repository contiene codice C che implementa una reverse shell per il sistema operativo Windows. Una reverse shell consente il controllo remoto del sistema tramite la riga di comando, offrendo la capacità di eseguire comandi sulla macchina infetta...

blueXploit

blueXploit Video di blueXploit blueXploit è la mia proof-of-concept personale che riproduce CVE-2023-45866 , la vulnerabilità di iniezione dei tasti Bluetooth scoperta da Marc Newlin. Abusa di un difetto nel protocollo Bluetooth per iniettare sequenze di tasti in un dispositivo target senza pairi...