Shellcode-Encryptor

ShellcodeEncryptor Un simple cifrador/descifrador/ejecutor de shellcode para evadir antivirus. Nota: He rehecho completamente el flujo de trabajo para la evasión, he descubierto que inyectar el binario en memoria usando PowerShell es el método más efectivo. Propósito Generar un binario .Net que...

AtlasC2

AtlasC2 Framework C2 en C centrado en operaciones de primera etapa Stage 1 Atlas se basa en obtener un punto de apoyo dentro de un entorno y luego utilizarlo para introducir armamento en C actualmente solo C mediante un implante basado en HTTP. No es muy seguro desde el punto de vista OPSEC en su...

LocalNet_Attacker

LocalNetAttacker Questo è uno strumento di attacco alla rete locale basato su Java. Utilizzando questo strumento puoi attaccare o raccogliere informazioni sui sistemi Windows target connessi a te nella stessa rete. Caratteristiche Recupera i dettagli IP Recupera i dettagli di sistema Attacchi web...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882/14883/14750 USO 1. clone este repositório 2. instale a biblioteca requests 3. python3 14882.py EXEMPLO root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator referência...

MAL-2026-5921 Malicious code in proto-bin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1994859460fe293cad87eadf5c704e5c717c71deaaf54842f5e29fce765f99d5 Package is advertised as a prototype utilities library pack/unpack/checksum but its exported pack function calls an internal fetch that downloads a...

Linux Distros Unpatched Vulnerability : CVE-2026-11636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures ...

HTTPS Fetch, Reverse TCP Stager (IPv6)

Fetch and execute an x86 payload from an HTTPS server. Connect back to the attacker over IPv6 Module Options msf use payload/cmd/windows/https/x86/peinject/reverseipv6tcp msf payloadreverseipv6tcp show actions ...actions... msf payloadreverseipv6tcp set ACTION msf payloadreverseipv6tcp show optio...

EUVD-2025-32067

Malicious code in bioql PyPI...

CVE-2025-11233

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

WordPress <= 6.8.2 Multiple Vulnerabilities (Sep 2025) - Windows

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

Malicious code in sisaws (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 0cc916986327ca493d55160fe841e48b756a40e030f59880874386e9e1e8a148 This package installs the SilentSync remote access trojan and allows remote code execution and data exfiltration. Windows machines are...

GE Proficy Cimplicity 7.5 Directory Traversal

GE Proficy Cimplicity version 7.5 proof of concept directory traversal vulnerability that takes advantage of a flaw discovered in 2013. ============================================================================================================================================= | Title : GE Profic...

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

The threat actors behind the nascent Buhti ransomware have eschewed their custom payload in favor of leaked LockBit and Babuk ransomware families to strike Windows and Linux systems. "While the group doesn't develop its own ransomware, it does utilize what appears to be one custom-developed tool,...

SUSE CVE-2019-1552

OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versio...

Metasploit Weekly Wrap-Up

BYOS: Bring your own stager We try hard to make sure we have a great choice of fully-functional payloads to choose from, but sometimes you might want to “branch” out on your own, and if that’s the case we’ve got you covered. In an attempt to make Metasploit play well with others, we’ve introduced...

Malicious Package

Overview pippytest is a malicious package. This is one of 12 malicious packages created by the same actor and discovered by Snyk. It downloads and executes malicious exe files containing malicious code that attempts to steal information from Google Chrome, tokens from Discord, and Injects a Disco...

The vulnerability of the Windows iSCSI Target service allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows iSCSI Target service for Windows operating systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-2671 · Microsoft · Windows Iscsi Target Service +1

Name of the Vulnerable Software and Affected Versions: Windows iSCSI Target Service affected versions not specified Description: The issue is related to errors in information processing within the Windows iSCSI Target Service, which can be exploited by a remote attacker to gain unauthorized acces...

Shellcode-Encryptor - A Simple Shell Code Encryptor/Decryptor/Executor To Bypass Anti Virus

A simple shell code encryptor/decryptor/executor to bypass anti virus. Note: I have completely redone the work flow for creating the bypass, I have found injecting the binary into memory using PowerShell as the most effective method. Purpose To generate a .Net binary containing base64 encoded, AE...

Remcos RAT delivered via Visual Basic

This blog post was authored by Erika Noerenberg Introduction Over the past months, Malwarebytes researchers have been tracking a unique malspam campaign delivering the Remcos remote access trojan RAT via financially-themed emails. Remcos is often delivered via malicious documents or archive files...