GO-2026-6487 emp3r0r has an unauthenticated HTTP Polling DoS in github.com/jm33-m0/emp3r0r/core

emp3r0r has an unauthenticated HTTP Polling DoS in github.com/jm33-m0/emp3r0r/core...

CVE-2026-61554

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send...

CVE-2026-61554

emp3r0r , a C2 framework for Linux environments, is vulnerable to an unauthenticated HTTP Polling DoS prior to version 4.2.5 . The http_poll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication completes, allowing a remote unauthenticated attacker to c...

CVE-2026-61554 emp3r0r has an unauthenticated HTTP Polling DoS

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send...

GHSA-4595-RVPX-4Q34 emp3r0r has an unauthenticated HTTP Polling DoS

Summary The httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send request bodies that are forwarded into the C2 dispatch path. This can consume serve...

emp3r0r has an unauthenticated HTTP Polling DoS

Summary The httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send request bodies that are forwarded into the C2 dispatch path. This can consume serve...

RPM Package Creator (Kitty Agent)

Builds a noarch RPM with Kitty HTTP polling agent and systemd persistence. Pure Python generation works on Windows/macOS/Linux. Controller: listeners/multi/reversehttppolling. from kittysploit import import os import shutil from pathlib import Path from lib.c2.agentinstaller import buildsystemdun...

Kitty PHP HTTP Polling Drop-in

Writes a PHP script that polls listeners/multi/reversehttppolling. Deploy on a web host and trigger via cron, include, or HTTP request. from kittysploit import from lib.c2.agentinstaller import buildphppollingdropin from lib.c2.beaconprofile import BeaconProfile class ModuleBackdoor: """PHP drop-...

Windows Schtasks Kitty Agent Pack

Writes kittyagent.py and installwindows.ps1 hidden pythonw + schtasks. Complements LOLBAS stagers with durable persistence. Controller: listeners/multi/reversehttppolling. from kittysploit import from lib.c2.agentinstaller import buildinstallreadme, buildwindowsschtasksinstallps1 from...

BusyBox Embedded HTTP Polling C2

POSIX/BusyBox ash HTTP polling implant for OpenWrt and embedded Linux. Pairs with listeners/multi/reversehttppolling base64 command protocol. from kittysploit import from lib.c2.embeddedhttpagent import buildembeddedhttpagentscript from lib.c2.embeddedsession import EmbeddedC2Mixin import uuid...

Deploy Embedded HTTP C2

Generate and optionally execute a BusyBox/ash HTTP polling agent on an OpenWrt/embedded shell. Pairs with listeners/multi/reversehttppolling. !/usr/bin/env python3 -- coding: utf-8 -- """Deploy BusyBox embedded HTTP polling C2 from a live shell session.""" from kittysploit import from...

Zig Kitty Agent HTTP Polling (Linux)

Compiled Zig Kitty implant: typed tasks over HTTP polling shell/ls/pwd/whoami/cat/download/upload/exit. Pairs with listeners/multi/reversehttppolling. !/usr/bin/env python3 -- coding: utf-8 -- """Zig Kitty HTTP polling implant Linux.""" from kittysploit import from...

Zig Kitty Agent HTTP Polling (Windows)

Compiled Zig Kitty implant: typed tasks over HTTP polling shell/ls/pwd/whoami/cat/download/upload/exit. Pairs with listeners/multi/reversehttppolling. !/usr/bin/env python3 -- coding: utf-8 -- """Zig Kitty HTTP polling implant Windows.""" from kittysploit import from...

PowerShell HTTP Polling Beacon

Native PowerShell HTTP polling implant compatible with listeners/multi/reversehttppolling jitter, kill date, working hours, cover traffic from kittysploit import import base64 from lib.c2.beaconprofile import BeaconProfile from lib.c2.powershellhttppolling import buildpowershellhttppollingscript...

Kitty Agent (typed tasks)

HTTP polling agent with typed tasks: shell, ls, pwd, whoami, cat, download, upload. Uses the same reversehttppolling listener as the classic beacon. from kittysploit import from lib.c2.beaconprofile import BeaconProfile from lib.c2.kittyagent import buildkittyagentscript class ModulePayload:...

Multi Python HTTP Polling Beacon

HTTP polling implant with beacon profile jitter, kill date, working hours, cover traffic, optional daisy-chain hop, and Ed25519 implant identity from kittysploit import from lib.c2.beaconprofile import BeaconProfile from lib.c2.httppollingagent import buildhttppollingagentscript class...

Reverse HTTP Polling Listener

HTTP polling C2 with beacon profiles, daisy-chain hops, cover-traffic decoys, and implant identity verification. !/usr/bin/env python3 -- coding: utf-8 -- import base64 import json import random import threading import time from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer from...

CVE-2023-53881

ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by...

CVE-2023-53881 ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP

ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by...

CVE-2023-53881: Cleartext Transmission of Sensitive Information

ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by...