apfell-chrome-extension-c2server

apfell-chrome-extension-c2server Serveur C2 Apfell pour le payload d'extension Google Chrome Trouvez la dernière version du serveur C2 d'extension Chrome dans le framework Apfell ici : https://github.com/its-a-feature/Apfell...

apfell

Apfell Apfell 是一款适用于 macOS 的 JavaScript for Automation JXA 载荷。此版本当前支持 Mythic 2.3.+ 及以上版本，并将根据需要进行更新。它不适用于 Mythic 2.2 及更低版本。 如何在 Mythic 中以这种格式安装代理 当你准备好测试安装，或者他人想安装你的代理时，操作相当简单。在 Mythic 中，你可以运行 mythic-cli 二进制文件，通过以下三种方式之一进行安装： sudo ./mythic-cli install github https://github.com/user/repo — 安装主分支...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting XSS in /apiui/command through the payloadtypescallback function, which allows an attacker to steal remote admin/user session and/or adding new users to the administration panel...

CVE-2020-23014

CVE-2020-23014 affects APfell 1.4 with an authenticated reflected XSS in /apiui/command_ via payloadtypes_callback. The vulnerability can enable theft of admin/user sessions and addition of new users to the administration panel. Public sources in the connected Red Hat advisory reiterate the issue...

UPDATE: APfell 1.4

APfell 1.4 was released a few hours ago! If you remember, I briefly mentioned about this tool in my seven month old post titled – List of Open Source C2 Post-Exploitation Frameworks. When this project started out, it was targeted more at MacOS alone. But what excites me about this newer release i...

Apfell - A macOS, Post-Exploit, Red Teaming Framework

A macOS, post-exploit, red teaming framework built with python3 and JavaScript. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout mac and linux based red teaming. Details Check out thre blog post on the initial release of the...