33 matches found
Covenant
Covenant 是一个 .NET 命令与控制框架，旨在突出 .NET 的攻击面，使攻击性 .NET 技术的使用更加容易，并作为红队成员的协作型命令与控制平台。 Covenant 是一个基于 ASP.NET Core 的跨平台应用程序，包含一个支持多用户协作的 Web 界面。 快速入门指南 请参阅 安装与启动 指南开始使用 Covenant！ Wiki 文档涵盖了 Covenant 的大部分核心功能及其使用方法。 功能特性...
Elite
Obsoleto Temporalmente El proyecto padre Covenant ya no requiere una aplicación de cliente. Elite ha quedado temporalmente obsoleto. Utilice en su lugar la interfaz web incluida con el proyecto Covenant. Es posible que Elite se actualice eventualmente para ponerse al día con el proyecto Covenant...
C2Bridge
Los C2Bridges permiten a los desarrolladores crear nuevos protocolos de comunicación personalizados y utilizarlos rápidamente dentro de Covenant. C2Bridges Los C2Bridges se utilizan para desarrollar un protocolo de comando y control saliente sin editar ningún código de Covenant. Para los...
zuthaka
A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...
CovenantDecryptor
CovenantDecryptor CovenantDecryptor está diseñado para descifrar los datos de comunicación del tráfico de Covenant. La extracción de la clave privada de la memoria es aplicable a otros C2, como Empire, dado su uso de RSACryptoServiceProvider para crear la clave. ¿Cómo funciona la comunicación de...
CVE-2026-92717
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...
CVE-2026-92717 Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...
EUVD-2026-80900
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...
CVE-2026-92717
Covenant through version 0.6 registers its CovenantHub SignalR hub without an Authorize attribute , allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token . With that token, an attacker can authenticate against the entire operator API and access grunts, crede...
CVE-2026-92717 Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...
CVE-2026-92717 Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...
CVE-2026-92717: Missing Authentication for Critical Function
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shar...
CVE-2020-36911
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...
CVE-2020-36911
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...
CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...
CVE-2020-36911
CVE-2020-36911 affects Covenant versions 0.1.3 through 0.5, described as a remote code execution vulnerability where an attacker can forge JWT tokens with administrative privileges and upload DLL payloads to execute arbitrary commands on the target system. The threat relies on forging tokens to g...
CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...
Covenant 信任管理问题漏洞
Covenant is a .NET framework by Ryan Cobb Personal Developer. A trust management issue vulnerability exists in Covenant versions 0.1.3 through 0.5, which stems from an attacker being able to spoof a malicious JWT token with administrator privileges, potentially leading to remote code execution...
CVE-2020-36911: Use of Hard-coded Credentials
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...