apfell

Apfell Apfell は、macOS 向けの JavaScript for Automation JXA ペイロードです。このバージョンは現在 Mythic 2.3.+ をサポートしており、必要に応じて更新されます。Mythic 2.2 以前では動作しません。 Mythic 内でこの形式のエージェントをインストールする方法 インストールをテストする時、または別のユーザーがあなたのエージェントをインストールする時、それは非常に簡単です。Mythic 内で mythic-cli バイナリを実行すると、次の3つの方法のいずれかでこれをインストールできます。 sudo ./mythic-c...

apfell-chrome-extension-c2server

apfell-chrome-extension-c2server 适用于 Google Chrome 扩展有效载荷的 Apfell C2 服务器 在 Apfell 框架中查找 Chrome 扩展 C2 服务器的最新版本，请访问：https://github.com/its-a-feature/Apfell...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

CVE-2020-23014 affects APfell 1.4 with an authenticated reflected XSS in /apiui/command_ via payloadtypes_callback. The vulnerability can enable theft of admin/user sessions and addition of new users to the administration panel. Public sources in the connected Red Hat advisory reiterate the issue...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

UPDATE: APfell 1.4

APfell 1.4 was released a few hours ago! If you remember, I briefly mentioned about this tool in my seven month old post titled – List of Open Source C2 Post-Exploitation Frameworks. When this project started out, it was targeted more at MacOS alone. But what excites me about this newer release i...

Apfell - A macOS, Post-Exploit, Red Teaming Framework

A macOS, post-exploit, red teaming framework built with python3 and JavaScript. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout mac and linux based red teaming. Details Check out thre blog post on the initial release of the...