这次是可可萝病毒！

Last update: Jul 14, 2022

Related tags

Security related resources kokoro

Overview

可可萝病毒！

事情是这样的，我又开始不干正事了。

众所周知，在Python里，0x0等于0，但是不等于可可萝。

这很不好，我们得把它改成可可萝！

效果

一般的Python——

Python 3.8.0 (tags/v3.8.0:fa919fd, Oct 14 2019, 19:37:50) [MSC v.1916 64 bit (AMD64)] on win32
Type "help", "copyright", "credits" or "license" for more information.
>>> 0
0
>>> 0x0
0

使用可可萝之后——

Python 3.8.0 (tags/v3.8.0:fa919fd, Oct 14 2019, 19:37:50) [MSC v.1916 64 bit (AMD64)] on win32
Type "help", "copyright", "credits" or "license" for more information.
>>> 0
0
>>> 0x0
可可萝

使用方法

只要使用pip安装——

pip install git+https://github.com/RimoChan/kokoro.git

安装之后你就中了可可萝病毒，0x0就会变成可可萝啦！

_{溜了溜了……}

Owner

黄巍

字节跳动首席吃点心员

GitHub Repository

对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

520_APK_HOOK 介绍将msf生成的payload，注入到一个正常的apk文件中，重新打包后进行加固，bypass手机安全管家的检测。项目地址: https://github.com/cleverbao/520apkhook 作者: BaoGuo 优点相比于原始的msf远控，此版本ap

368 Jan 02, 2023

wsvuls - website vulnerability scanner detect issues [ outdated server software and insecure HTTP headers.]

WSVuls Website vulnerability scanner detect issues [ outdated server software and insecure HTTP headers.] What's WSVuls? WSVuls is a simple and powerf

47 Sep 22, 2022

Scout Suite - an open source multi-cloud security-auditing tool,

Description Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using t

5k Jan 05, 2023

Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.

springcore-0day-en These are all my notes from the alleged confirmed! 0day dropped on 2022-03-29. This vulnerability is commonly referred to as "Sprin

105 Nov 26, 2022

Chrome Post-Exploitation is a client-server Chrome exploit to remotely allow an attacker access to Chrome passwords, downloads, history, and more.

ChromePE [Linux/Windows] Chrome Post-Exploitation is a client-server Chrome exploit to remotely allow an attacker access to Chrome passwords, download

3 Oct 05, 2022

This is an injection tool that can inject any xposed modules apk into the debug android app

This is an injection tool that can inject any xposed modules apk into the debug android app, the native code in the xposed module can also be injected.

32 Nov 05, 2022

CVE-2021-36798 Exp: Cobalt Strike < 4.4 Dos

A denial of service (DoS) vulnerability (CVE-2021-36798) was found in Cobalt Strike. The vulnerability was fixed in the scope of the 4.4 release. More

104 Nov 09, 2022

A TCP Backdoor made in python

Tracey-Backdoor A Reverse Shell Backdoor made in python OOP. It supposed to work in Windows and Linux OS Functions: Reverse Connection Send Reverse TC

13 Oct 15, 2022

This tool help you to check if your Windows machine has hidden miner.

Hidden Miner Detector This tool help you to check if your Windows machine has hidden miner. Miners track when you open antivirus software or task mana

2 Oct 05, 2022

POC of CVE-2021-26084, which is Atlassian Confluence Server OGNL Pre-Auth RCE Injection Vulneralibity.

CVE-2021-26084 Description POC of CVE-2021-26084, which is Atlassian Confluence Server OGNL(Object-Graph Navigation Language) Pre-Auth RCE Injection V

9 Aug 31, 2022

A fast sub domain brute tool for pentesters

subDomainsBrute 1.4 A fast sub domain brute tool for pentesters. It works with P

2 Oct 18, 2022

FOSSLight Scanner performs open source analysis after downloading the source by passing a link that can be cloned by wget or git.

FOSSLight Scanner Analyze at once for Open Source Compliance. FOSSLight Scanner performs open source analysis after downloading the source by passing

8 Nov 03, 2022

这次是可可萝病毒！

Related tags

Overview

可可萝病毒！

效果

使用方法

Owner

黄巍

对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

wsvuls - website vulnerability scanner detect issues [ outdated server software and insecure HTTP headers.]

Scout Suite - an open source multi-cloud security-auditing tool,

Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.

Chrome Post-Exploitation is a client-server Chrome exploit to remotely allow an attacker access to Chrome passwords, downloads, history, and more.

This is an injection tool that can inject any xposed modules apk into the debug android app

CVE-2021-36798 Exp: Cobalt Strike < 4.4 Dos

A TCP Backdoor made in python

This tool help you to check if your Windows machine has hidden miner.

POC of CVE-2021-26084, which is Atlassian Confluence Server OGNL Pre-Auth RCE Injection Vulneralibity.

A fast sub domain brute tool for pentesters

FOSSLight Scanner performs open source analysis after downloading the source by passing a link that can be cloned by wget or git.

CVE-2021-41773 Path Traversal for Apache 2.4.49

EMBArk - The firmware security scanning environment

Cve-2022-23131 - Cve-2022-23131 zabbix-saml-bypass-exp

macOS Initial Access Payload Generator

Grafana-POC(CVE-2021-43798)

RCE 0-day for GhostScript 9.50 - Payload generator

IDA Python Script for anti ollvm

Gmail Accounts Hacking