PIRATE

PIRATE Python 远程访问工具 用法 1- 运行 payloader.py 生成客户端脚本 2- 运行 pirate.py 管理服务器并接收连接 功能 打开远程Shell 截取屏幕截图 拍摄摄像头照片 运行键盘记录器 Windows持久化 发送和接收文件 打开Windows消息框 使用示例 生成您的载荷文件 启动 pirate.py 监听连接 现在等待连接！ 一旦获得连接，您可以在受害者机器上运行任何您想要的命令...

ALHacking

Autor: 4lbH4cker Versión 4 Herramientas de Hacking Herramientas para ayudarte con el hacking ético, hackeo de redes sociales, información telefónica, ataque a Gmail, ataque a número de teléfono, descubrimiento de usuarios, hackeo de cámara web • ¡¡Potente herramienta de ataque DDOS!! Video de...

Storm-Breaker

一款具有吸引人的功能的工具。 功能: 无需任何权限即可获取设备信息！ 访问位置信息 智能手机 访问摄像头 访问麦克风 更新日志: 第二次（最新）更新于2022年11月4日。 该工具的整体结构从头编程，并以Web面板形式提供（之前的版本是在命令行中使用的）。 修复了之前版本的错误！ 添加了自动下载Ngrok！ 模板已优化！ 日志可以下载（新增）！ 添加了清除日志功能！ 可以上传到个人主机（你将不再有Ngrok问题） 你可以随时启动和停止监听器！（随意） 美化的用户界面（新增）！ 我们在新版本的Storm Breaker中删除了Ngrok，并委托用户运行和共享本地主机。所以请注意，Storm...

scan-for-webcams

scan-for-webcams 📷 自动探测可公开访问的网络摄像头 English docs 目录 使用方法 下载安装 演示 使用方法 python MJPG.py : 用来探测公开的 MJPG 播放器 python webcamXP.py : 用来检测公开的 webcamXP 播放器 程序会输出一列地址，格式如： ipaddress:port 如果您的终端支持链接，请单击该链接并在浏览器中将其打开，否则，请复制该链接并在浏览器中将其打开。 下载装 1. clone&cd 进这个repo: git clone...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

BetterAndroRAT

Better Android RAT 基于 Dendroid 的 Android 远程访问木马 所有责任由您自行承担。 请仅将其用于研究目的。 功能 远程更新和安装应用程序 远程摄像头 远程麦克风录音 远程文件管理 远程通话与短信 远程设备控制...

telegram-c2

Telegram C2 通过 Telegram 机器人控制服务器。 安装 Tutorial Video 创建一个 Telegram 机器人 编辑 main.py，将 BOTAPIKEY 设置为机器人的 api key，将 telegramuserid 设置为你的 Telegram ID 安装以下依赖 pip install -r requirements.txt 编译为独立可执行文件以便于部署 pip install -U pyinstaller pyinstaller main.py 部署到目标机器 启动 Telegram 机器人 用法 /start - 启动 Telegram 机器人...

WebcamViewer

Visor de Webcam Previsualiza la webcam conectada como una PoC de CVE-2021-30731. Debe ejecutarse en macOS 11.3.1 o inferior, o macOS 10.15 anterior a la Actualización de Seguridad de Catalina 2021-004. Compilación 1. Instala los requisitos de compilación: brew install autoconf automake cmake...

lights-out

Luces apagadas Este repositorio contiene herramientas que permiten obtener control por software del LED de la cámara web de un ThinkPad X230 sin acceso físico al portátil. Fueron creadas como una demostración práctica de que el malware puede grabar vídeo a través de la cámara web sin que el LED l...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel before 5.11.3 when a webcam device is present. The videousercopy function in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, identified as CID-fb18802a338b...

Malicious code in minecraft-ytreceiver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...

Malicious code in gcli-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67 The package installs and runs a host daemon python -m gcli host that polls a shared JSON document at api.npoint.io for commands, decrypts them,...

Malicious code in stellarfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa63d1cc5db1027ec89a76a75db2e765cc0c951ca8b5324ac4ec9ef3e849d325 stellarfix ships a.NET Windows executable at bin/stellarfn.exe and a postinstall.js that enumerates bin/.exe and unconditionally launches the first o...

AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malware concepts with a real browser capability" to turn it into a working ransomware technique that runs entirely inside the browser on both...

GeoVision GV-VMS V20 WebCam Server stack overflow vulnerabilities

Summary Multiple exploitable stack overflow vulnerabilities exist in the WebCam Server functionality of GV-VMS V20 versions: 20.0.2. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities...

GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability

Summary A stack overflow vulnerability exists in the WebCam Server Login functionality of GV-VMS V20 versions: 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Confirmed Vulnerable...

Catch spyware in the act with Windows Webcam Monitoring

You’re working hard late at night, replying to emails and planning the week ahead. Then suddenly, a PDF file requests access to your camera. Why would a PDF need camera access? Cybercriminals often disguise spyware inside seemingly harmless files and programs. An unexpected request for access to...

CVE-2026-7372

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Stack-overflow via...

CVE-2026-42370

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability...

CVE-2026-42369

GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, but it is also possible to enable remote access via the "WebCam Server" feature. Once enabled, it is possible to access t...