spybrowse
1d8/spybrowseCode developed to steal certain browser config files (history, preferences, etc)
data-exfiltrationinformation-gatheringmalware-analysis+2
636 years ago
1d8/spybrowseCode developed to steal certain browser config files (history, preferences, etc)
loociprian/gc2-sheetGC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint…
corelight/pingbackA Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.
haxrob/bpfdoor-controller-sourceSource code for a BPFDoor backdoor controller supporting TCP, UDP, ICMP, and HTTPS covert communication channels with magic packet activation,…
aydinnyunus/keyloggerGet Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
katrielmoses/voidaccessSelf-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…
s3n4t0r-0x0/pixelcode-attackMalicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…
ammaraskar/vscode-github-token-grab-extensionExtension to grab github token from VSCode
r3mrum/loki-parseA python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…
dragon56yt/revshellA comprehensive educational repository demonstrating the evolution of a Windows reverse shell implant, from a simple proof‑of‑concept (v1.0) to a…
abraxas/veneficus-implant-publicSpicy malware 0day. Full kill-chain malware: exploit, pivot, c2, persistence. Rust converted to pseudo-code - if you're smart you can build it…
bee-san/pywhat🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…
internetangel/zerocrumbDumping App Bound Protected Credentials & Cookies Without Privileges.
jnschaeffer/cve-2022-44268-detectorDetect images that likely exploit CVE-2022-44268
kaandemir993/redline-stealer-c2-defender-bypass-payload-analysis"Reverse engineering analysis of RedLine Stealer, a .NET-based info-stealer that uses C2 domains (198.46.86.63, tempuri.org), Windows Defender…
abraxas/veneficusSuper elite end-to-end implant 0day. Full kill-chain. Exploit, escalate, pivot, poison, persistence.
limerboy/adamantium-thief:key: (THIS CODE IS OUTDATED FOR NEW CHROME VERSIONS) Decrypt chromium based browsers passwords, cookies, credit cards, history, bookmarks, autofill.…
badchars/darknet-mcp-server66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit…