sgxgsx / mapAccountHijack
mapAccountHijack is a tool designed to carry out a MAP Account hijack attack, which exploits the Message Access Profile (MAP) in Bluetooth Classic, enables the theft of MFA and OTPs leading to the successful hijacking of accounts on services that rely on SMS OTPs during login or recovery. Tool leaks phone numbers, emails, can send and retrieve S…
☆24Updated this week
Related projects: ⓘ
- Rubber Ducky powered by NeoKey☆18Updated 3 months ago
- 🐍 Python Exploit for CVE-2022-23935☆13Updated last year
- BlueStacks privilege escalation through VM backdooring☆21Updated 2 months ago
- A tool capable of bypassing easy root detection mechanisms by patching applications automatically (without frida).☆25Updated 3 months ago
- Exploits of different CVE IDs (CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-4…☆16Updated last year
- ☆14Updated this week
- ZTE F660 Routers Authentication Bypass Leading to RCE.☆15Updated 7 months ago
- This repository hosts PoC exploits for vulnerabilities I've discovered, provided for education and to highlight the importance of system …☆17Updated last year
- ☆14Updated 9 months ago
- BLE based C2 for Hak5's Bash Bunny☆14Updated 10 months ago
- Detect code obfuscation through text classification in the detection process.☆43Updated 7 months ago
- Secretly record audio and video with chromium based browsers.☆16Updated 7 months ago
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆14Updated 10 months ago
- CHAOS RAT web panel path RCE PoC☆27Updated 5 months ago
- An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component☆11Updated last year
- ☆24Updated 10 months ago
- Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely☆59Updated last month
- ALPChecker - a tool to detect spoofing and blinding attacks on the ALPC interaction☆13Updated last year
- Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction address in ntdll module by parsing the PEB of the current pr…☆18Updated 7 months ago
- Cryptanalysis of the DAO exploit & Multi-Stage Attack☆20Updated 5 months ago
- Linux Malware creator to attack Windows System via Reverse Shell with FindWindow Process Code Injection☆13Updated last year
- This contains notes and code for my Troopers23 Beyond Java talk☆20Updated last year
- CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "d…☆13Updated 8 months ago
- A mechanism that trampoline hooks functions in x86/x64 systems.☆19Updated 10 months ago
- ☆14Updated this week
- exploits for CVE-2024-20017☆22Updated 2 weeks ago
- Exploit app for CVE-2022-20494, a high severity permanent denial-of-service vulnerability that leverages Android's DND (Do not disturb) f…☆23Updated last year
- A utility that can be used to launch an executable with a DLL injected☆19Updated 10 months ago
- CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds☆20Updated 4 months ago
- This script is designed to exploit a heap buffer overflow vulnerability in a socks5 proxy server.☆22Updated 6 months ago