unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
yesbaby.js - Using Your Own Admin Session to Create a Rogue Admin
Most JavaScript injections on WordPress sites go after regular visitors with redirects, spam, or ski...
2026-11-1 14:31:38 | 阅读: 16 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
wp
php
yesbaby
sikerim1213
attacker
One Line in query.php That Brings index.php and .htaccess Back From the Dead
2023-10-18#query.php #reinfection #persistence #.htaccess #index.php #backdoor #WordPress #PH...
2026-11-1 14:31:37 | 阅读: 12 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
php
wp
inxxdex
hct
htaccess
Fake Imunify360 Dropper Loads an SEO Spam Installer From a Public GitHub Repo
This dropper is named after a real hosting security product, Imunify360, which a lot of shared hosts...
2026-11-1 14:31:36 | 阅读: 13 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
php
wp
mycode
mkfile
curlopt
pluggable.php Login Stealer - XOR'd Passwords in a Fake License Key
In my wp-login.php keylogger post the injection sat in the login page itself. This sample goes one l...
2026-11-1 14:31:35 | 阅读: 15 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
wp
username
php
wpsdt4
52aba346
SMILODON - A Server-Side PHP Skimmer for WooCommerce
Nearly every skimmer I’ve written about runs as JavaScript in the shopper’s browser. SMILODON runs o...
2026-11-1 14:31:33 | 阅读: 43 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
curlopt
smilodon2
billing
php
wordpress
Trojanized Authorize.Net Gateway Plugin Encrypts Stolen Cards With RSA
Most skimmers write stolen card data to a log in plain text or Base64. If the site owner finds that...
2026-11-1 14:31:32 | 阅读: 15 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
php
authorize
cim
wc
attacker
tags-manager.com - A WebSocket Skimmer That Brings Its Own Checkout Form
(function() { var sid = '212de5d2275c6838a31636b442d8f08b'; var ip = '127.0.0.1'; var si...
2026-11-1 14:31:31 | 阅读: 13 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
cleave
parseint
classlist
elem
wss://qetbootstrap.com skimmer
wss exfiltration⌗ ASN ZERGRUSH (39622)⌗ Sample⌗ The first stage of the skimmer is injec...
2024-2-12 01:1:25 | 阅读: 25 |
收藏
|
Over Security - Cybersecurity news aggregator - lukeleal.com
stage
skimmer
atob
loaded
wss
Previous
-26
-25
-24
-23
-22
-21
-20
-19
Next