meterpeter

Author: @r00t-3xp10it Version release: v2.10.14 Distros Supported: Windows x86|x64, Linux Inspired in the work of: '@ZHacker13 - ReverseTCPShell' :octocat: Quick Jump List Project Description List Of Available Modules Meterpeter C2 Latest Release How To - Under Linux Distributions How To - Under...

Sinister

Sinister This small python script can do really awesome work. Sinister is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3. Disclaimer :computer: This project was created only for good purposes and personal use. TH...

thanatos

Thanatos Thanatos is a Windows and Linux C2 agent written in rust. Installation To install Thanatos, you will need Mythic set up on a machine. In the Mythic root directory, use mythic-cli to install the agent. sudo ./mythic-cli install github https://github.com/MythicAgents/thanatos sudo...

unshackle

End of support ⚠ the project is now archived and will no longer be worked on because of the time that is needed to maintain this project and testing it on VMware in a not-so-good pc, Unshackle - Password Bypass Tool Unshackle is an open-source tool to bypass Windows and Linux user passwords from ...

deception-as-detection

Deception-as-Detection Deception based detection techniques mapped to the MITRE’s Adversarial Tactics, Techniques, and Common Knowledge ATT&CK™: Windows Technique Matrix Linux Technique Matrix Mac Technique Matrix 📔 Deception Stories A sample deception story is created as a reference. More...

BearFTP

BearFTP Dare to hack a bear? BearFTP is a honeypot FTP server, designed to log hackers' attempts and report them to public IP blacklist databases. Featuring: Configuration support no need to recompile Edit files and content of files located on server Tested on FileZilla and WinSCP. AntiNmap,...

GHSA-G27P-QF6J-C96C Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the Blazor WebAssembly debugger included in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applicatio...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

ida-efitools2

About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...

wtf v0.5.8

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

MAL-2026-13375 Malicious code in app-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2be81204ed300a759662ca3315431eec9dbb11392232f04cc58d1a815fb94b4 On npm install, scripts.postinstall executes test.js, which performs three attacker-beneficial actions against the installer's host. First, it...

MAL-2026-13033 Malicious code in boxy-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3d566208b48f775ec51e3308934813973ad0a6fef6cb98fd438042056bb9b0 On require of the package, index.js loads shim.js which reconstructs attacker-controlled hostnames from split-string arrays Cloudflare Workers...

MAL-2026-12074 Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcb1561dd1153104da17218a74c318e8d497b4df1429bbbda8cda0144bd06ce On require of the package's main entry, index.js transitively loads platform.js, which selects a platform-specific payload URL, fetches opaque...

Malicious code in nagix-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce2f0b04a8b6a69d540678c440c14c0c4b9b5a6cf6a957e020aceff239c279 package.json declares "postinstall": "node test.js", which auto-executes on npm install and invokes two exported routines in index.js. The first...

PEASS-ng v20260803-00785084

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

Toy Ghouls’ new toy: the GenieLocker ransomware

Introduction The new GenieLocker ransomware family has been active since March 2026. It has been used in attacks against organizations in the Russian Federation, primarily in the manufacturing sector, and attributed to the Toy Ghouls group by open-source intelligence link in Russian. The Toy...

MAL-2026-10091 Malicious code in qlinforge (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713a696ce725031aab16903d7a29c80611a4c4368c7e35bacf29069a3581c602 setup.py registers a custom install command that, on Linux, downloads an opaque binary from http://115.190.124.243:9090/payloadlinuxamd64 to...

EUVD-2026-42058

Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthenticated attacker to access an unprotected API...

A Critical Deadline Is Approaching for Windows and Linux Security

The cryptographic keys that secure your computer’s boot sequence will start to expire on June 24. Here’s what that means for you...

MAL-2026-5924 Malicious code in binproto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbe88a299e58c31b71b346733abb6684ce1a1e8e68fad118eca48a53a2b15a3 On any call to the exported pack function, index.js downloads a platform-specific binary from https://wotann-dktl.vercel.app/service/assets/fetchBina...