Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/09 8:57 a.m.•17 views

Reverse_DNS_Shell

DNShell v1.7 Description: A Python Reverse Shell that uses DNS as the C2 channel. Requires: dnslib dnspython pycrypto Gotchyas: don't forget to change your HOST don't forget to change your SECRET key run server first Moar Info: http://lockboxx.blogspot.com/2015/01/python-reverse-dns-shell.html...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/08 7:29 p.m.•19 views

DNS-Persist

DNS-Persist DNS-Persist es un agente de post-explotación que utiliza DNS para el comando y control. El código del lado del servidor está en Python y el agente está codificado en C++. Esta es la primera versión; se añadirán más funciones y mejoras en el futuro. Primeros pasos Autor 0x09AL -...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/02 7:21 a.m.•12 views

WAREED-DNS-C2

Wareed DNS C2 WAREED es un Comando y Control C2 que utiliza el protocolo DNS para comunicaciones seguras entre el servidor y el objetivo. Diseñado para minimizar la comunicación y limitar el intercambio de datos, está pensado para ser un C2 de primera etapa que persista en máquinas que no tienen...

6.2AI score
SaveExploits0
OSV
OSV
•added 2026/08/08 12:46 a.m.•15 views

MAL-2026-13659 Malicious code in sme-rko-finance-front-payments-currency-payment-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b5dcef9a8613b9de1b3bbd1137a65cdbf087a9a96543602fb3372d7eca978f On require of this package, index.js loads./loader.js which reconstructs C2 hostnames via array-join string concealment...

6AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•5 views

CVE-2026-25791: Missing Authentication for Critical Function

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is enabled. Because sessions are stored...

7.5CVSS6AI score0.00554EPSS
SaveExploits1References1
Rows per page
Query Builder