Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Injectra is a Python tool for injecting custom payloads into files using their magic numbers. It supports file types like zip, jpg, docx, and more. Check it out: #CyberSecurity #Pentesting #PayloadInjection #hackingtools #RedTeam #infosec #bugbounty

AnonKryptiQuz's profile picture

AnonKryptiQuz

1,567 subscribers

24,054 Aufrufe • vor 1 Jahr •via X (Twitter)

Wissenschaft & Technologie#CyberSecurity#Pentesting#PayloadInjection#hackingtools#RedTeam#infosec#bugbounty
LIVE

Anya Rossi• Live Now

Private livecam show

4 Kommentare

Profilbild von 0vulns
0vulnsvor 1 Jahr

Someone explain to me, how on the earth the .jpeg will run php code!

Profilbild von Rickyticky Bobbywobbin
Rickyticky Bobbywobbinvor 1 Jahr

INTRODUCING: Agentic Security - LLM Security Scanner! 🔍 🔑 Features: Scans for prompt injections, jailbreaking & more. Provides detailed reports & options to customize attack rules. 🔗access the GitHub Link ↓

Profilbild von S41n1K 🇵🇸
S41n1K 🇵🇸vor 1 Jahr

Does this method work for every php site? and higher version PHP? What configuration is needed in the environment to execute the PHP cmd?

Profilbild von AnonKryptiQuz
AnonKryptiQuzvor 1 Jahr

I wouldn't say that this works for every PHP site out there. It depends on server configuration and security measures like file validation and execution restrictions.

Ähnliche Videos

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam
1:27

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

13,181 Aufrufe • vor 1 Jahr

TimeVault automates finding information disclosure vulnerabilities by effortlessly filtering sensitive files and uncovering hidden data. Check it out: Team: mohd farzaan @hexsh1dow haq enver #CyberSecurity #BugBounty #OSINT #hackingtools #InfoSec
1:14

TimeVault automates finding information disclosure vulnerabilities by effortlessly filtering sensitive files and uncovering hidden data. Check it out: Team: mohd farzaan @hexsh1dow haq enver #CyberSecurity #BugBounty #OSINT #hackingtools #InfoSec

AnonKryptiQuz

13,964 Aufrufe • vor 1 Jahr

🚀 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a tool that detects and exploits CVE-2025-29927, a security flaw in Next.js Check it out: CREDIT:AnonKryptiQuz #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking #RedTeam #infosec
1:56

🚀 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a tool that detects and exploits CVE-2025-29927, a security flaw in Next.js Check it out: CREDIT:AnonKryptiQuz #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking #RedTeam #infosec

X

13,284 Aufrufe • vor 1 Jahr

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss
0:21

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

Today Cyber News

34,216 Aufrufe • vor 2 Jahren

🚨Android SSL Pinning Bypass using Noxer🚨 👉Automate your Android penetration testing lab setup using Nox Emulator. Noxer is a powerful Python script designed for automating Android penetration testing tasks within the Nox Player emulator. It simplifies setup, enhances stability, manages Frida Server, removes unwanted bloatware, integrates BurpSuite certificates, and much more! ©️ Tool made by Chetanya Sharma 🔗Noxer: . . . . . #InfoSec #CyberSecurity #cybersec #informationsecurity #redteam #redteaming #kali #kalilinux #linuxubuntu #Linux #linuxfan #linuxuser #osint #android #hacking #hacker #hackers #hackerman #mrrobot #elliotalderson #ethicalhacker #ethicalhackers #cyber #techie #technerd #technerds #cyberattack #cyberattacks #pentest #pentesting #sslpinning
1:28

🚨Android SSL Pinning Bypass using Noxer🚨 👉Automate your Android penetration testing lab setup using Nox Emulator. Noxer is a powerful Python script designed for automating Android penetration testing tasks within the Nox Player emulator. It simplifies setup, enhances stability, manages Frida Server, removes unwanted bloatware, integrates BurpSuite certificates, and much more! ©️ Tool made by Chetanya Sharma 🔗Noxer: . . . . . #InfoSec #CyberSecurity #cybersec #informationsecurity #redteam #redteaming #kali #kalilinux #linuxubuntu #Linux #linuxfan #linuxuser #osint #android #hacking #hacker #hackers #hackerman #mrrobot #elliotalderson #ethicalhacker #ethicalhackers #cyber #techie #technerd #technerds #cyberattack #cyberattacks #pentest #pentesting #sslpinning

Brut 🇮🇳

28,326 Aufrufe • vor 1 Jahr

Google released a 1MB AI model that quickly catches malware disguised as PDFs. Magika is an open source file detection system. It doesn't trust file extensions. Instead, it reads the actual content to figure out what a file really is. That means malware disguised as a PDF gets caught. Hidden scripts inside images get flagged. Fake extensions don't fool it. It runs on a single CPU and classifies files in about 5ms. It supports 200+ file types and hits ~99% accuracy across ~100M training samples. It works as: > A Rust command line tool > A Python library via pip > JavaScript and Go bindings Google already uses it across Gmail, Drive, and Safe Browsing. Now anyone can run it locally, scan entire directories, and build it into their own security pipelines.
0:38

Google released a 1MB AI model that quickly catches malware disguised as PDFs. Magika is an open source file detection system. It doesn't trust file extensions. Instead, it reads the actual content to figure out what a file really is. That means malware disguised as a PDF gets caught. Hidden scripts inside images get flagged. Fake extensions don't fool it. It runs on a single CPU and classifies files in about 5ms. It supports 200+ file types and hits ~99% accuracy across ~100M training samples. It works as: > A Rust command line tool > A Python library via pip > JavaScript and Go bindings Google already uses it across Gmail, Drive, and Safe Browsing. Now anyone can run it locally, scan entire directories, and build it into their own security pipelines.

AlphaSignal AI

13,164 Aufrufe • vor 3 Monaten

Gained a reverse shell through a PNG file using I-Espresso and Xploitra. Curious to try it yourself? Check the links below ⬇️ 🔗 I-Espresso: 🔗 Xploitra:
0:47

Gained a reverse shell through a PNG file using I-Espresso and Xploitra. Curious to try it yourself? Check the links below ⬇️ 🔗 I-Espresso: 🔗 Xploitra:

AnonKryptiQuz

63,780 Aufrufe • vor 1 Jahr

Introducing Euphony, an open-source tool for visualizing chat data and Codex session logs. Paste in a public URL or upload a local file, and Euphony turns the raw data into an easy-to-browse view. It supports translation, filtering, editing, and more.
0:29

Introducing Euphony, an open-source tool for visualizing chat data and Codex session logs. Paste in a public URL or upload a local file, and Euphony turns the raw data into an easy-to-browse view. It supports translation, filtering, editing, and more.

OpenAI Developers

386,575 Aufrufe • vor 3 Monaten

NEW TOOL: It's a fully in-browser binary/file analysis tool with a hex editor. Features: - Hex editor and you can save the edited file - Mach-O symbols - ELF and PE basic metadata - Zip file contents - Fully client-side in-browser, so it is private and the files are never sent anywhere This is meant as a basic and quick tool to check simple metadata and do hex edits. If you need something more robust for malware analysis consider other tools like Malcore™ aka Malcore.io™ or just use a cli/native tool. Shoutout to Battle Programmer Yuu for inspiring me to use Unifont that I stole from tmp.0ut (it looks so good!) The code is all generated by Claude in Cursor and hosted on Github Pages. I don't really do any binary analysis, so if you have suggestions for improvements, let me know. (this is technically 'early access' and i haven't tested it too much)
0:29

NEW TOOL: It's a fully in-browser binary/file analysis tool with a hex editor. Features: - Hex editor and you can save the edited file - Mach-O symbols - ELF and PE basic metadata - Zip file contents - Fully client-side in-browser, so it is private and the files are never sent anywhere This is meant as a basic and quick tool to check simple metadata and do hex edits. If you need something more robust for malware analysis consider other tools like Malcore™ aka Malcore.io™ or just use a cli/native tool. Shoutout to Battle Programmer Yuu for inspiring me to use Unifont that I stole from tmp.0ut (it looks so good!) The code is all generated by Claude in Cursor and hosted on Github Pages. I don't really do any binary analysis, so if you have suggestions for improvements, let me know. (this is technically 'early access' and i haven't tested it too much)

solst/ICE of Astarte

142,852 Aufrufe • vor 1 Jahr

Import large data sets in seconds! With Appwrite’s new CSV imports feature, you can import documents into your Appwrite collections using a simple CSV file. And the best part, you don’t even need a custom script. Check out this video to learn how it works.
2:23

Import large data sets in seconds! With Appwrite’s new CSV imports feature, you can import documents into your Appwrite collections using a simple CSV file. And the best part, you don’t even need a custom script. Check out this video to learn how it works.

Appwrite

44,969 Aufrufe • vor 1 Jahr

For 40 years the file browser hasn’t changed. Today, we’re launching with $8 million in seed funding to rebuild the file browser into something more intelligent, searchable, and delightful. The world is in the middle of a data explosion. We’re generating and using more files than ever, but the apps we’re using to manage our files don’t even understand them. It’s time for file browsers to become useful. When you search for “dog”, it should show you content with dogs in it, not just files with “dog” in the name! When you want to edit, convert, summarize, or organize a file, your browser should do that, too. Your files tell the story of your life, but when you need a specific one, you usually can’t even find it anymore. Why can’t your file browser find it for you, or cross-reference it when you have a question? Prompting can give an LLM a million tokens of context. With Poly, you can give it the next trillion. As long as we can afford it, all new users receive 100GB of free cloud storage. We can’t wait for you to try it out!
1:25

For 40 years the file browser hasn’t changed. Today, we’re launching with $8 million in seed funding to rebuild the file browser into something more intelligent, searchable, and delightful. The world is in the middle of a data explosion. We’re generating and using more files than ever, but the apps we’re using to manage our files don’t even understand them. It’s time for file browsers to become useful. When you search for “dog”, it should show you content with dogs in it, not just files with “dog” in the name! When you want to edit, convert, summarize, or organize a file, your browser should do that, too. Your files tell the story of your life, but when you need a specific one, you usually can’t even find it anymore. Why can’t your file browser find it for you, or cross-reference it when you have a question? Prompting can give an LLM a million tokens of context. With Poly, you can give it the next trillion. As long as we can afford it, all new users receive 100GB of free cloud storage. We can’t wait for you to try it out!

Abhay Agarwal

1,776,784 Aufrufe • vor 8 Monaten

🌟Introducing Explorers DNX! For 4 years we have wondered what an Explorers DX would look like. Using the DreamNexus rom hack tool, @jayden37013658 and I decided to give it a shot and remake the beloved Explorers games ourselves! Check it out!
1:55

🌟Introducing Explorers DNX! For 4 years we have wondered what an Explorers DX would look like. Using the DreamNexus rom hack tool, @jayden37013658 and I decided to give it a shot and remake the beloved Explorers games ourselves! Check it out!

SwitchEOS

201,791 Aufrufe • vor 1 Jahr

A healthy cybersecurity budget doesn't mean infinite resources. It never does. That's why reasonable mitigation against the backdrop of risk appetite and tolerance is always important. Check out our podcast for more insights.
0:38

A healthy cybersecurity budget doesn't mean infinite resources. It never does. That's why reasonable mitigation against the backdrop of risk appetite and tolerance is always important. Check out our podcast for more insights.

Center for Internet Security (CIS)

21,729 Aufrufe • vor 5 Monaten

releasing sakura v1.0 a high-performance minimal (~1k lines of code) terminal-based multimedia library that renders images, gifs, and videos using sixel graphics with synchronized audio playback. sakura supports all modern formats: jpg, png, bmp, animated gifs, mp4, avi, mov and mkv with adaptive scaling and advanced frame timing and skipping for smooth playback. it also supports custom image processing and batch processing with decent-ish log output. more examples in replies:
1:43

releasing sakura v1.0 a high-performance minimal (~1k lines of code) terminal-based multimedia library that renders images, gifs, and videos using sixel graphics with synchronized audio playback. sakura supports all modern formats: jpg, png, bmp, animated gifs, mp4, avi, mov and mkv with adaptive scaling and advanced frame timing and skipping for smooth playback. it also supports custom image processing and batch processing with decent-ish log output. more examples in replies:

sλrthak

181,004 Aufrufe • vor 11 Monaten

sqlit is a lazygit style SQL TUI for the terminal. It supports 10+ databases (Postgres, SQLite, Supabase, ClickHouse, DuckDB, etc), has query history, autocomplete and more. Peter Adams (Maxteabag on GitHub) made sqlit using textualize.io and is Terminal Tool of the Week! ⭐️
1:36

sqlit is a lazygit style SQL TUI for the terminal. It supports 10+ databases (Postgres, SQLite, Supabase, ClickHouse, DuckDB, etc), has query history, autocomplete and more. Peter Adams (Maxteabag on GitHub) made sqlit using textualize.io and is Terminal Tool of the Week! ⭐️

Terminal Trove

137,289 Aufrufe • vor 7 Monaten

‼️A malware binder tool branded "Universal File Binder 2026" is being sold on a popular cybercrime forum, advertised as fully undetectable and designed to disguise executable payloads as common file types including documents, images, and videos. ⠀ ‣ Threat Actor: Davina Keenan ‣ Category: Malware Tool Sale / Payload Binder ‣ Product: Universal File Binder 2026 ‣ Industry Impact: Phishing, Social Engineering, Initial Access ⠀ The tool is marketed as a payload binder, a category of malware used to attach executable code to a legitimate looking file so that opening the file triggers both the decoy document and the hidden payload. A video demo is attached to the listing and this post. ⠀ Advertised features: ⠀ ▪️ Claimed "100% FUD" (Fully Undetectable) against major antivirus engines including Windows Defender, Avast, and Kaspersky, at both scantime and runtime ▪️ Bind payloads to .jpg, .png, .pdf, .docx, .pptx, .mp4, and .mp3 files ▪️ Icon and extension spoofing, including double extension tricks ▪️ Lightweight stub with small footprint ▪️ Stated compatibility with Windows 10 and Windows 11 ⠀ Pricing: ⠀ ▪️ Single build: $100 ▪️ Lifetime access with updates: $1,000 ⠀ Binders of this type are a common component of commodity phishing kits, used primarily to deliver RATs, stealers, and ransomware via email attachments or messaging platforms. "FUD" claims on public forums are typically short lived and degrade within days or weeks of release as antivirus vendors collect samples.
1:58

‼️A malware binder tool branded "Universal File Binder 2026" is being sold on a popular cybercrime forum, advertised as fully undetectable and designed to disguise executable payloads as common file types including documents, images, and videos. ⠀ ‣ Threat Actor: Davina Keenan ‣ Category: Malware Tool Sale / Payload Binder ‣ Product: Universal File Binder 2026 ‣ Industry Impact: Phishing, Social Engineering, Initial Access ⠀ The tool is marketed as a payload binder, a category of malware used to attach executable code to a legitimate looking file so that opening the file triggers both the decoy document and the hidden payload. A video demo is attached to the listing and this post. ⠀ Advertised features: ⠀ ▪️ Claimed "100% FUD" (Fully Undetectable) against major antivirus engines including Windows Defender, Avast, and Kaspersky, at both scantime and runtime ▪️ Bind payloads to .jpg, .png, .pdf, .docx, .pptx, .mp4, and .mp3 files ▪️ Icon and extension spoofing, including double extension tricks ▪️ Lightweight stub with small footprint ▪️ Stated compatibility with Windows 10 and Windows 11 ⠀ Pricing: ⠀ ▪️ Single build: $100 ▪️ Lifetime access with updates: $1,000 ⠀ Binders of this type are a common component of commodity phishing kits, used primarily to deliver RATs, stealers, and ransomware via email attachments or messaging platforms. "FUD" claims on public forums are typically short lived and degrade within days or weeks of release as antivirus vendors collect samples.

Dark Web Informer

25,017 Aufrufe • vor 2 Monaten

Absolutely spot on! We need more parents to think and act like this when it comes to teachers and administrators, injecting their liberal politics into the classroom. These walkouts are getting out of hand and the indoctrination of our children is unacceptable! OutspokenSamantha
1:32

Absolutely spot on! We need more parents to think and act like this when it comes to teachers and administrators, injecting their liberal politics into the classroom. These walkouts are getting out of hand and the indoctrination of our children is unacceptable! OutspokenSamantha

AmericanPapaBear™

35,928 Aufrufe • vor 5 Monaten

nless is a TUI tool that is like Excel for live log data. It takes in logs, CSV or JSON and transforms them into columns in the terminal. You can then filter, sort, search, stream live data and more. Matt Pryor (mpryor on GitHub) made nless using textualize.io and is Terminal Tool of the Week! ⭐️
0:40

nless is a TUI tool that is like Excel for live log data. It takes in logs, CSV or JSON and transforms them into columns in the terminal. You can then filter, sort, search, stream live data and more. Matt Pryor (mpryor on GitHub) made nless using textualize.io and is Terminal Tool of the Week! ⭐️

Terminal Trove

31,728 Aufrufe • vor 2 Monaten

For my Recon 2024 presentation, I'm announcing a new tool for the Reverse Engineering community, BadUnboxing! BadUnboxing is an automated Android Unpacker that works by locating and decompiling code inside the APK that is relevant to the unpacking process. It's a modular, open-source Java application that fools malware into dropping their own unpacked payloads! Check out the Repo here:
0:56

For my Recon 2024 presentation, I'm announcing a new tool for the Reverse Engineering community, BadUnboxing! BadUnboxing is an automated Android Unpacker that works by locating and decompiling code inside the APK that is relevant to the unpacking process. It's a modular, open-source Java application that fools malware into dropping their own unpacked payloads! Check out the Repo here:

LaurieWired

167,893 Aufrufe • vor 2 Jahren