BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener - GitHub - IMcPwn/browser-backdoor: BrowserBackdoor is an Electron Application with ...

Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or noscript on most popular ...

Linux Memory Cryptographic Keys Extractor. Contribute to cryptolok/CryKeX development by creating an account on GitHub.

Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers - Busindre/dumpzilla

Neto | A tool to analyse browser extensions. Contribute to ElevenPaths/neto development by creating an account on GitHub.

Memory Debugger for Windows, Linux, Mac, and Android - DynamoRIO/drmemory

TorProxy is a tool which uses netfilter hooks in the linux kernel to route all network traffic through the Tor network - r-a-w/TorProxy

ESET researchers have discovered the first in-the-wild UEFI rootkit. Dubbed LoJax, the research team has shown that the Sednit operators used different components of the LoJax malware to target a few government organizations in the Balkans as well as in Central…

Win32k NtUserCreateActivationObject Denial Of Service (19H1) - NtUserCreateActivationObject.cpp

Shared with Dropbox

Hackers have been targeting Iranian users of Telegram and Instagram with fake login pages, app clones and BGP hijacking in attacks that have been ongoing since 2017, Cisco Talos reveals. 

Low interaction honeypot designed for Android Debug Bridge over TCP/IP - huuck/ADBHoney

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions - chenerlich/FCL

The U.S. Cyber Command (USCYBERCOM) this week started sharing malware samples with the cybersecurity industry via Chronicle’s VirusTotal intelligence service.

Faking the Appearance of a System Message in Gmail

In this web skimming match between two Magecart groups, there can only be one winner.