CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data.The script works in the following steps: If the response includes a 302 Redirect with a Location header containing the wp-admin path, it considers the hijacking successful. The script generates URLs with
Loading
All posts in "Malicious Scripts"
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. Potential impact : Exploitation of CVE-2024-28987 could allow an attacker to bypass security policies implemented in SolarWinds Web Help Desk, which could result in unauthorized access to sensitive data, modification
A new Edge stealer v4.0 incorporates with various functionalities, it’s private stub, developed from scratch in C/Golang,. These include capturing screenshots of the desktop, stealing wallets from platforms like Atomic, Exodus, and MetaMask, extracting passwords from all major browsers, acquiring cookies from Chrome and Firefox, gathering browser history and downloaded files, retrieving Task Scheduler lists,
A PoC Exploit for CVE-2024-3105 – The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE) The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.5.0 via the ‘insert_php’
Android malware (.apk) can be spread through a fake PDF document by manipulating the file extension in the WhatsApp application. Step 1: First, create a free account at https://user.ultramsg.com/signup.php. We will use this to manage the API Step 2: Click the “Add Instance” button and create a new instance. Step 3: Fill in the appropriate fields
NecroWord — an easy way to embed a payload using undetect macros! 👩💻 What is it? 🤔 — In simple words – you can create an undetect infected .doc document ⚙️ How to use ? 🫱 Attention! — This is not a CVE | We condemn the use of software for illegal purposes. All responsibility
Ransomware is a type of malicious software that locks users out of their system or data using different methods to force them to pay a ransom. Most often, such programs encrypt files on an infected machine and demand a fee to be paid in exchange for the decryption key. Additionally, such programs can be used
Powerful multi-platform stealer with a huge pack of grabbed data. Wallets stealer, browsers stealer, sessions stealer, etc. All logs will be sent using discord webhooks or telegram bot. Data grubed Introduction to the Murk Stealer The digital landscape is constantly evolving, bringing with it both opportunities and threats. Among the latest cybersecurity threats is the
Command Injection occurs when entering a value due to insufficient verification of the input value when registering a device PIN number that exists in the router’s Configure -> Wi-Fi -> Wi-Fi Protect Config setting. Command Injection is possible when the ping command is executed due to insufficient verification of the input value for the IP
Predator Crypter Simple Obfuscation Tool An obfuscation tool for .Net + Native files. Main Features Prerequisites To open project you need: 1- Visual Studio 2019+2022 2 – requires Guna UI
Note:This code needs to be developed, those who have the ability to develop the code can do this✍️✍️✍️✍️✔️ This code provides options for various processes related to managing and protecting APK files. When the user runs the program, they can choose one of the following operations:❤️ Encrypt APK:Task: This operation encrypts the APK file using
The Spyroid Rat offers a wide array of functionalities to manage and monitor Android devices discreetly. From file and call management to live location and screen tracking, SMS and application management, keylogging, social media account hacking, and more, Spyroid Rat is designed for stealthy control, presenting a significant threat to Android device security and privacy. Advanced
Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources. This Python script automates the process of scanning for systems potentially vulnerable to the Loop DoS attack and the hypothetical CVE-2024-2169 vulnerability.
Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules. Dependencies rizin (v0.6.2) Installation Install with pip (tested on python3.6 and above): Install manually:
Features Supported Platforms Client (Session) Windows (x86_x64) Linux (x86_x64) MacOS Windows 11 Ubuntu AMD64 Windows 10 Debian i386 Windows 8/8.1 CentOS M1 Windows 7 ppc64le M2 Windows XP mips Windows Server 2000-2022 s390x Quick Start
– It has more options than the previous release, look like VIP version Advertised Features:– Spoof ANY extension– 300+ different icons available (Microsoft Office ones included) – (Mainly icons from System)– UAC Bypass (VIP license and above only)– Implementation of the dogwalk n-day exploit, more info below (Private license only)– Bypass Windows Smartscreen, EV certs
Kryptina v2.2 is now available for Free. This update brings a complete RAAS toolkit that you can deploy right away! Note:Complete source code of this app (author + payload + web app + documentation) Password: @BlackHatGhost Features; => A clean web (Python + Flask + MySQL) and console interface. => Highly customizable and lightweight payloads
Let’s start, as expected, with a tedious theory. Unfortunately, without it, the essence of what is happening in the future will not be clear, so I will try to tell you as briefly as possible and in an understandable language. Privilege tokens are permissions given by the system to a process. For example, if a
SiCat is an advanced exploit search tool designed to identify and gather information about exploits from both open sources and local repositories effectively. With a focus on cybersecurity, SiCat allows users to quickly search online, finding potential vulnerabilities and relevant exploits for ongoing projects or systems. SiCat’s main strength lies in its ability to traverse
Just a Ransomware Builder Features: Archive password: @ransomteam
Paradise Ransomware is a type of malware that encrypts the files on the victims’ systems and then demands a ransom to recover the data. This ransomware family first appeared in 2017 and continues to be active with numerous variants identified over the years. The ransomware typically targets Windows operating systems, and it is distributed through
Subscribe & Follow
