Exe2Image

Exe2Image Ein einfaches Dienstprogramm zum Konvertieren von EXE-Dateien in PNG-Bilder und umgekehrt. Herunterladen: https://github.com/OsandaMalith/Exe2Image/releases Screenshots Putty.exe in ein Bild konvertiert...

chromepass

Chromepass - Hacking delle password e dei cookie salvati di Chrome Vedi Demo · Segnala un bug · Richiedi una funzione Indice dei contenuti Informazioni sul progetto Rilevamento antivirus Guida introduttiva Dipendenze e requisiti Installazione Utilizzo Email Errori, bug e richieste di funzionalità...

VSSCopy

VSSCopy Piccolo e sporco PoC per CVE-2021-36934 Utilizzo: VSSCopy.exe C:\temp Crediti: https://twitter.com/jonasLyk https://twitter.com/gentilkiwi...

kalici-dosya-silme-araci

Permanent File Deletion Tool & Kalıcı Dosya Silme Aracı Questo progetto è un semplice strumento che consente agli utenti di eliminare permanentemente i file specificati. Il programma sovrascrive il file selezionato con dati casuali, ne modifica il contenuto e poi lo cancella, rimuovendo di fatto...

aDLL

aDLL - Avventura della Libreria a Collegamento Dinamico aDLL è uno strumento di analisi binaria focalizzato sulla scoperta automatica delle vulnerabilità di DLL Hijacking. Lo strumento analizza l'immagine del binario caricato in memoria per cercare DLL caricate al momento del caricamento e utiliz...

PKCS11SSHAgent

SRO PKCS11 – SSH Agent CNG Unificação soberana PKCS11 + SSH-agent + Pageant + CNG/Smartcard Um executável Windows único que unifica quatro funções tradicionalmente separadas: Módulo PKCS11 completo Firefox, OpenSC, ssh -I Agente SSH compatível com OpenSSH/Git/VS/WSL Servidor Pageant compatível co...

RawrXDA

RawrXD PE Writer - Vollständige Implementierung Übersicht Dies ist ein vollständiger PE32+-Writer und Maschinencode-Emittent, implementiert in reiner x64-MASM-Assembly ohne Abhängigkeiten und ohne CRT-Nutzung. Er erzeugt lauffähige Windows-Executables von Grund auf. Architektur Der PE-Writer folg...

CVE-2021-1732_exp

CVE-2021-1732-Exploit CVE-2021-1732 Exploit "Não use para atividades ilegais, caso contrário, a responsabilidade é sua!" Uso do EXP CVE-2021-1732exploit.exe whoami Recurso: https://bbs.pediy.com/thread-266362.htm...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP créé : try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

PS2EXE

Repository senza IA - l'intelligenza artificiale sta uccidendo la creatività e la nostra natura! PS2EXE Rielaborazione del grande script di Ingo Karstein con supporto GUI. L'output e l'input GUI sono attivati con un solo interruttore, vengono generati eseguibili Windows reali. Compila solo script...

MAL-2026-14046 Malicious code in @ghost_debugger/nanocache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c027fa29f4577bd052bfda553a617994365ea5855216b877e900610542f4bcce On require/import, the package spawns a bundled 1.1 MB Windows executable at vendor/nanocache.exe as a detached background process with stdio ignored...

MAL-2026-13630 Malicious code in @rbx-ts/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476bbe7c2ce12348142e93deffe53c9d4d6dfef3400030af81cff902bac5935 This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. Its postinstall script...

Malicious code in beaver-ui-smart-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9aeae07ad8c21acdd73d30a24723d30ef468f03a3412e21ea4bf726f27c2f12 The package is advertised as a React UI filter component but on require of index.js loads adapter.js, which assembles remote hostnames from split...

Malicious code in streak-math-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ca17a73b4b4b7a21d7ccbad12df26ca3c6ad524689f2e1520bd34724b61fbb On module import, index.js decodes a hex-obfuscated string table to reconstruct a Backblaze B2 URL and a set of Windows filesystem paths, then gates...

MAL-2026-12464 Malicious code in streak-daybucket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799caca8e351ad8d1144b26eb0c38ffdf06afb415f63a320e6ea455968996aa0 [email protected] presents itself as a day-bucket / streak math utility but its index.mjs embeds a hex-encoded Windows PE binary leading 4D5A90...

Malicious code in streak-math-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba4f1a9b23ca375fed98868d8ca488ec722b473060834412b0b1b23f5cae37a [email protected] is advertised as a math primitives library but its index.mjs top-level IIFE bootstrap runs on any import and drops a hex-embedd...

Malicious code in twork-data-services-getting-arrests (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfe9505e3a40e8cd4c314f982901e6cbc0c988fbe6ae5fef58c6c1dc5b78a33 [email protected] acts as a binary dropper. index.js top-level requires./support.js, whose start runs at load time: it selec...

Malicious code in @types-beta/sdk (npm)

The npm package @types-beta/sdk is a supply-chain dropper that impersonates the trusted @types DefinitelyTyped namespace to look like a routine type-definition dependency. It bundles a Windows executable vendor/nanocache.exe and launches it as an import-time side effect: dist/index.js calls init ...

MAL-2026-11148 Malicious code in streak-core-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf01d1216cca4dbb1b7da58b70a710d7d04bff671d2889f8ca0d7837633dec34 [email protected] presents itself as a 'day-math primitives' library, but index.mjs the package main, executed on any require/import contains an...

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL. Confiant, which detailed the campaign on July 23, 2026, said it has...