apfell

Apfell Apfell은 macOS용 JavaScript for Automation JXA 페이로드입니다. 이 버전은 현재 Mythic 2.3.+를 지원하며 필요에 따라 업데이트됩니다. Mythic 2.2 및 이하 버전에서는 작동하지 않습니다. Mythic 내에서 이런 형식의 에이전트를 설치하는 방법 설치를 테스트할 때나 다른 사용자가 에이전트를 설치할 때는 매우 간단합니다. Mythic 내에서 mythic-cli 바이너리를 실행하여 다음 세 가지 방법 중 하나로 설치할 수 있습니다: sudo ./mythic-cli...

apfell-chrome-extension-c2server

apfell-chrome-extension-c2server Google Chrome 확장 프로그램 페이로드용 Apfell C2 서버 최신 버전의 Chrome 확장 프로그램 C2 서버를 Apfell 프레임워크에서 확인하세요: https://github.com/its-a-feature/Apfell...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

CVE-2020-23014 affects APfell 1.4 with an authenticated reflected XSS in /apiui/command_ via payloadtypes_callback. The vulnerability can enable theft of admin/user sessions and addition of new users to the administration panel. Public sources in the connected Red Hat advisory reiterate the issue...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014: Improper Neutralization of Input During Web Page Generation

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

UPDATE: APfell 1.4

APfell 1.4 was released a few hours ago! If you remember, I briefly mentioned about this tool in my seven month old post titled – List of Open Source C2 Post-Exploitation Frameworks. When this project started out, it was targeted more at MacOS alone. But what excites me about this newer release i...

Apfell - A macOS, Post-Exploit, Red Teaming Framework

A macOS, post-exploit, red teaming framework built with python3 and JavaScript. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout mac and linux based red teaming. Details Check out thre blog post on the initial release of the...