WifiPassword-Stealer

WifiPassword-Stealer Obtén todas las contraseñas WiFi registradas de la computadora objetivo. INSTALACIÓN si estás usando un archivo python root@kitploit: pip install smtplib pip install subprocess pip install glob USO •Crea una cuenta en "https://mailtrap.io/" usando un correo temporal. •Estable...

SharpGmailC2

SharpGmailC2 Nuestro amigable Gmail actuará como servidor y el implant exfiltrará datos a través de SMTP y leerá comandos del C2 Gmail mediante el protocolo IMAP DISCLAIMER: Este proyecto no funciona contra Windows Defender desde el 29 de noviembre de 2022. Esta herramienta está ahora firmada por...

New Snake Keylogger Variant Leverages AutoIt Scripting to Evade Detection

A new variant of the Snake Keylogger malware is being used to actively target Windows users located in China, Turkey, Indonesia, Taiwan, and Spain. Fortinet FortiGuard Labs said the new version of the malware has been behind over 280 million blocked infection attempts worldwide since the start of...

Engel & Völkers Technology GmbH: Blind SSRF on infodesk.engelvoelkers.com via proxy.php

Summary: The application has a proxy.php file which basically accepts a parameter via url query parameter and passes it to fopen. However, it doesn't validate the parameter value prior to passing it to fopen- making it possible to influence what's being done. That said, because of code following...

Stealthy Malware Flies Under AV Radar with Advanced Obfuscation

Researchers warn hackers are putting a new spin on old injection techniques and successfully end-running endpoint protection. They are tracking a campaign, that kicked off in January, that is still going strong exploiting weaknesses in web browsers. The objective is to hide in the background of...