DeimosC2

DeimosC2 دي موس في حالة: مُهمَل لم يعد تتم صيانة DeimosC2 ويحتوي على ثغرة XSS معروفة CVE-2025-26244. شكرًا لـ JaRm222 على تحديد الثغرة وإخطارنا. يمكن العثور على تقريره عن الثغرةهنا. DeimosC2 هي أداة قيادة وتحكم C2 بعد الاستغلال تستخدم طرق اتصال متعددة للتحكم في الأجهزة التي تم اختراقها. يعمل خادم...

CVE-2025-26244

CVE-2025-26244-POC Le code pour exploiter cette vulnérabilité est visible dans 'spoof.go'. Il se fait passer pour un agent auprès du serveur C2. Pour exploiter cette vulnérabilité, nous avons besoin de : 1. L'adresse IP et le port du listener. 2. La clé publique du listener. 3. L'URL du premier...

PT-2025-16955

Name of the Vulnerable Software and Affected Versions DeimosC2 version 1.1.0-Beta Description The graph functionality of DeimosC2 is susceptible to Stored Cross-Site Scripting XSS. This allows for the potential theft of session cookies and unauthorized access to the C2 server. DeimosC2 is a...

Exploit for CVE-2025-26244

CVE-2025-26244-POC The code to exploit this vulnerability can...

Lazarus Group's infrastructure reuse leads to discovery of new malware

In the Lazarus Groups latest campaign, which we detailed in a recent blog, the North Korean state-sponsored actor is exploiting CVE-2022-47966, a ManageEngine ServiceDesk vulnerability to deploy multiple threats. In addition to their "QuiteRAT" malware, which we covered in the blog, we also...

DeimosC2: What SOC Analysts and Incident Responders Need to Know About This C&C Framework

This report provides defenders and security operations center teams with the technical details they need to know should they encounter the DeimosC2 C&C framework...

DeimosC2 - A Golang Command And Control Framework For Post-Exploitation

DeimosC2 is a post-exploitation Command & Control C2 tool that leverages multiple communication methods in order to control machines that have been compromised. DeimosC2 server and agents works on, and has been tested on, Windows, Darwin, and Linux. It is entirely written in Golang with a front e...