grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

PwnFox

PwnFox PwnFox es una extensión de Firefox/Burp que proporciona herramientas útiles para tu auditoría de seguridad. Si eres usuario de Chrome, puedes visitar https://github.com/nccgroup/autochrome. PwnFox Funcionalidades Un solo clic en BurpProxy Perfiles de Contenedores Registrador de PostMessage...

nexfil

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. Available In Featured The Privacy, Securit...

MalleableC2Profiles

MalleableC2Profiles Malleable C2 profiles for Cobalt Strike version 3.6+ bingsearchgetonly.profile - Bing web search profile, uses GET requests only cnnvideogetonly.profile - MSNBC live video straming profile, uses GET requests only googledrivegetonly.profile - Google Drive document viewer...

1135-CobaltStrike-ToolKit

1135-CobaltStrike-ToolKit Malleable C2 Files Cobalt Strike's Malleable C2 profiles are designed to counter traffic analysis. Cobalt Strike's Malleable C2 profiles define the "communication format specifications and methods" of C2 traffic between the victim and the team server. By disguising C2...

noinstagram

noinstagram Me deshice de mi cuenta de IG hace algún tiempo, pero aún así me gustaría ver fotos de mi esposa y nuestro perro. Simplemente visitaba el sitio web de IG para cada usuario público que quería ver, pero eso era demasiado trabajo. Así que construí esto un domingo. ¿Quieres tu propia pági...

mythic_ornn

Mythic Ornn LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles. Mythic agents are tedious to write by hand: every one re-implements the same wire protocol, payload-type scaffolding, and C2 plumbing. Mythic Ornn skips the boilerplate by turning the official Mythic developer docs...

Burp2Malleable

Burp2Malleable Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles. It lets you take captured/crafted requests from BurpSuite or ZAP, POSTMAN etc. of what you want your traffic to look like/blend in with, and turns them into CobaltStrike...

LockBit-Tattoo

LockBit-Tattoo Electronic: ID: 272784 Joined: Jul 20, 2022 Male: BTC: 3HeNJmgecLNHEhVn3JMcboybTgiFx4DGe3 Media: photo2022-09-0822-15-38.jpg Female: BTC: 3HC5eCcYtW27jhD59mg4U3haWr36teiLXB Media: photo2022-09-1101-07-49.jpg photo2022-09-1101-07-54.jpg DegB2W: ID: 272203 Joined: Jul 16, 2022 Male:...

Awesome-CobaltStrike

Awesome CobaltStrike Contents 0x00 Introduction 0x01 Articles & Videos 1. Basic Knowledge 2. Crack and Customisation 3. Useful Trick 4. CobaltStrike Hide 5. CobaltStrike Analysis 6. CobaltStrike Video 0x02 C2 Profiles 0x03 BOF 0x04 Aggressor Script 0x05 Related Tools 0x06 Related Resources...

Sandroid_Dexray-Intercept

Android Binary API Tracer Sandroid - Dexray Intercept Dexray Intercept is part of the dynamic Sandbox Sandroid. Its purpose is to create runtime profiles to track the behavior of an Android application. This is done utilizing frida. Install Just install it with pip: root@kitploit: python3 -m pip...

badger-builder

badger-builder badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles. Simply provide badger-builder a flavor for your desired profile and it will prompt OpenAI for fitting configurations. Listener/payload profile configs that are AI generated: C2 URIs Request/respon...

RedCaddy

RedCaddy C2 redirector base on caddy Table of content Overview Feature Note Quick start Step by step References Overview Generate caddyfile with c2 malleable profiles Feature Block IP by GEOIP country Allow requests by header matcher User-agent & IP blacklist Support multiple redirection TeamServ...

LinkedIn adds new checks for fake profiles and work histories

LinkedIn is adding trust and verification features aimed at making fake professional identities, invented work histories, and company impersonation harder to pull off. The company is responding to an environment in which generative AI enables imposters to create an entirely made-up professional...

EUVD-2026-86596

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-93656

The User Profile Builder plugin for WordPress (versions up to and including 4.0.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the Avatar Field . The root cause is insufficient input sanitization and output escaping. Authenticated attackers with Subscriber-level access and above can i...

RedWarden

RedWarden - Redirector Maleable Flexible para CobaltStrike anteriormente conocido como el plugin malleableredirector de proxy2's Elevemos el listón en la resiliencia de los redirectores C2 frente a IR, ¿de acuerdo? El mundo del Red Teaming ha visto varias ideas excelentes sobre cómo combatir a lo...

nOBEX

nOBEX Introduction nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles. nOBEX provides PBAP and MAP clients to clone the genuine virtual filesystems for these profiles from a real phones. This means downloading the...

Malleable-C2-Profiles

This repository does not have a README...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2026-054081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054081 advisory. BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in...