SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT is the most advanced and versatile OTP & SMS capture bot that is capable of getting OTP & SMS codes from victims by impersonating a company or bank. You can use this to get OTP for logins, banks, credit cards, apple pay, and more. Join...

SMSBotBypass

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

FMD Android

FMD Android Find your device via SMS, instant messengers, or a web interface FMD Server. FMD allows you to locate, ring, wipe and issue other commands to your device when it's lost. It aims to be a secure open source alternative to Google's Find My Device. Why? I lost my brand new phone last week...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – iOS AudioConverterService Zero-Click RCE Public disclosure of CVE-2025-31200 – a zero-click remote code execution RCE vulnerability in Apple's iOS 18.X, specifically within the AudioConverterService component. The vulnerability is triggered by a malicious audio file delivered via...

Ruoyi-Vue-Pro - Unauthenticated Admin Takeover via Predictable SMS Code

ruoyi-vue-pro Yudao ships base configuration yudao.sms-code.begin-code=end-code=9999, so every generated SMS verification code is the constant "9999" in all profiles. The anonymous SMS-login flow therefore grants an access token to any account whose mobile number is known: send-sms-code followed ...

SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...

Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read

An arbitrary file read vulnerability, also known as a "path traversal" or "directory traversal" vulnerability, occurs when an attacker is able to access files on a system that they shouldn't have access to. This vulnerability arises from improper input validation or insufficient access controls i...

SourceCodester Stock Management System 1.0 - SQL Injection Authentication Bypass

SourceCodester Stock Management System 1.0 contains a SQL injection vulnerability in the login function at /sms/classes/Login.php. The username parameter is directly interpolated into an SQL query without sanitization, allowing an unauthenticated attacker to bypass authentication and gain admin...

Vaim-sms

Vaim-sms What is Vaim-sms ? This is sms bomber who send otp in target phone number unlimitly. Many times you just want to annoy or play a prank on your friends. If you find yourself in that situation then this SMS Bomber is the perfect tool for you! You can send unlimited SMS to anyone. This...

AndroRAT

AndroRAT Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote Access Tool. It has been developed in a team of 4 for a university project. ...

otp-bot

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

BetterAndroRAT

Better Android RAT Dendroid Based Android Remote Access Trojan All responsibilities are at your own risk. Please use it only for research purposes. Feature Remote Update & Install Application Remote WebCam Remote Microphone Record Remote File Management Remote Call & SMS Remote Device Controller...

SDK-SMS-Stack

SMS Stack Sms Stack is a Framework to provide TPC/IP based characteristics to the GSM Short Message Service. This framework works in multiple environments to provide a full stack integration in a service. The main layer features techniques to control the order and the number of sms for a given...

fake-sms

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...

androrat

'm in progress internationalization, Welcome to join. Androrat Fork/Silent Edition Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client-side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote...

CVE-2025-10184_PoC

APK Build for CVE‑2025‑10184 PoC This is an APK Build for a PoC of CVE‑2025‑10184 The vulnerability exists in com..providers.telephony, allowing arbitrary applications to read SMS messages without SMS read permission Source Code The source code and more details can be found in Rapid7's article:...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Unauthenticated Privilege Escalation via Arbitrary Password Reset ☆ === Beelze === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-11387 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type| Missing Authenticatio...

CVE-2025-66947

CVE-2025-66947 Time Based Blind SQL Injection in krishanmuraiji SMS v1.0 ⏱️ Visual comparison: normal response vs 6s delayed response 🔍 Summary TL;DR: A GET parameter in an admin module allows time-based SQL injection via response delays. A 𝗧𝗶𝗺𝗲 𝗯𝗮𝘀𝗲𝗱 𝗯𝗹𝗶𝗻𝗱 𝗦𝗤𝗟 𝗶𝗻𝗷𝗲𝗰𝘁𝗶𝗼𝗻 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 exists in...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

signal-without-smartphone

Setup Signal without smartphone A Desktop application to register an account with Signal and link it with Signal Desktop, all without requiring a smartphone. This utility avoids the need of a smart phone, but still requires a way to receive SMS messages during the setup phase. Signal recently...