Commander

Commander Commander هو إطار عمل للقيادة والتحكم C2 مكتوب بلغة Python وإطار Flask وSQLite. يأتي مع عميلين مكتوبين بلغة Python ولغة C. قيد التطوير المستمر غير مناسب للمبتدئين الميزات اتصال مشفر بالكامل TLS عملاء متعددون التمويه Obfuscation جلسات تفاعلية قابل للتوسع ترميز البيانات بصيغة Base64 واجهة...

Camelishing

Camelishing Outil d'ingénierie sociale Camelishing Outil d'ingénierie sociale Python 3x Contact root@kitploit: !CONTACT! | Coded Abdulaziz ALTUNTAŞ | | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Fonctionnalités root@kitploit: 1-Bulk email sending...

reave

REAVE Reave एक पोस्ट-एक्सप्लॉइटेशन फ्रेमवर्क है जो हाइपरवाइज़र एंडपॉइंट्स के लिए तैयार किया गया है, जो Python में लिखा गया है। यह वर्तमान में विकास के अंतर्गत है। Reave पारंपरिक लिस्नर/एजेंट मॉडल का अनुसरण करता है, जहाँ उपयोगकर्ता एकाधिक लिस्नर सेट कर सकता है, जो किसी भी संख्या में एजेंट को स्वीक...

hermes

हर्मीस हर्मीस एक हल्का Linux एजेंट है जो Python में लिखा गया है, और Mythic 3.0 और उसके नए संस्करणों के लिए डिज़ाइन किया गया है। इसका नाम हर्मीस देवताओं के संदेशवाहक के नाम पर रखा गया है — गति और गोपनीयता के लिए निर्मित। विशेषताएँ Linux समर्थन SOCKS5 प्रॉक्सी समर्थन पिवट और लेटरल मूवमेंट के लिए...

CVE-2026-66138

A vulnerability was found in Ironic-Python-Agent's IPA time syncing code. The value of the ntpserver configuration option is inserted into a shell command without sanitization. This command is run as root very early in the IPA startup flow, allowing an attacker to run arbitrary commands as root...

CVE-2026-66138

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

UBUNTU-CVE-2026-66138

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

UBUNTU-CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

CVE-2026-66138

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

CVE-2026-66138

OpenStack Ironic Python Agent (up to 11.6.0) is affected. A project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent by supplying a malicious configuration that causes the ntp_server value to be passed to a shell. The vulnerability allows rem...

EUVD-2026-48476

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

CVE-2026-66138

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

CVE-2026-54422

CVE-2026-54422 affects OpenStack Ironic Python Agent up to and including 11.5.0. A malicious boot container deployed via ironic-python-agent can extract the credentials used to download it, enabling credential disclosure on a local attacker. The CVSS metrics indicate a LOCAL attack vector with HI...

CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

PT-2026-64232

Name of the Vulnerable Software and Affected Versions OpenStack Ironic Python Agent versions prior to 11.6.1 Description A project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent. This occurs because the value of the ntp server variable is...