29 matches found
CVE-2024-41570-Havoc-C2-RCE
Havoc-C2-RCE CVE-2024-41570 这是Havoc C2框架中的一个链式RCE漏洞（CVE-2024-41570）。 命令注入：Havoc存在命令注入漏洞，允许经身份验证的用户在Teamserver上执行命令。影响版本从0.3到最新版本0.6。Havoc的默认配置文件包含硬编码密码，因此粗心的C2操作员如果在公共网络上使用默认配置，可立即被利用。 SSRF：此漏洞通过伪造demon agent注册和回连，在teamserver上打开一个TCP套接字并从中读写数据来利用。这允许攻击者泄露teamserver的源IP等更多信息。...
CVE-2024-28741-northstar-agent-rce-poc
NorthStar C2 RCE en agente mediante XSS almacenado PoC de RCE en agente para CVE-2024-28741, una vulnerabilidad XSS almacenado en NorthStar C2. Este exploit funciona enviando múltiples solicitudes de registro de agente malicioso al teamserver para construir incrementalmente un payload funcional d...
RedCaddy
RedCaddy 基于 Caddy 的 C2 重定向器 目录 概述 特性 说明 快速开始 逐步操作 参考资料 概述 使用 C2 malleable profiles 生成 Caddyfile 特性 按 GEOIP 国家屏蔽 IP 通过 Header 匹配器允许请求 User-agent 和 IP 黑名单 支持多重重定向 TeamServer 端口守卫（warden） 说明 modules 下的 "redwardenparser.py" 来自RedWarden，作者 mgeeky 大量灵感来自这篇文章：🇬🇧 Carrying the Tortellini's golf sticks IP...
meteor
Meteor 一个用 Go 编写的跨平台 C2/团队服务器，支持多种传输协议。 注意：该项目仍在开发中，因此并非完全稳定。文档也尚不完善，但会随着时间逐步改进。 概述 Meteor 系统分为以下几个部分： Core ：主要的“团队服务器”组件，用于跟踪操作、主机、分组等。Core 运行一个内部 API，该 API “不”对外访问，只有监听器（listener）和 Meteornet（即 docker 网络）上的其他容器可以访问。 Database - 一个 Postgres 数据库，保存 Core 所使用的 ent 关系 Client - 用户与 Core 交互的方式。目前的客户端是...
sleep_python_bridge
Cobalt Strike Sleep Python Bridge Este proyecto es un 'puente' entre el lenguaje sleep y python. Permite el control de un teamserver de Cobalt Strike a través de python sin necesidad del cliente GUI estándar. NOTA: Este proyecto está muy en BETA. El objetivo es proporcionar un campo de pruebas pa...
Havoc-C2-SSRF-poc
CVE-2024-41570: Havoc-C2-SSRF-poc Questa vulnerabilità viene sfruttata falsificando la registrazione e i check-in di un agente demon per aprire un socket TCP sul teamserver e leggere/scrivere dati da esso. Ciò consente agli attaccanti di far trapelare gli IP di origine dei teamserver e molto altr...
CVE-2024-415770-ssrf-rce
CVE-2024-415770-SSRF-RCE Beschreibung Dieses Skript interagiert mit dem Teamserver. Aktualisieren Sie das Skript mit Ihrer Teamserver-URL. Es führt mehrere Schritte durch, um einen Agenten zu registrieren, einen Socket zu öffnen und einen SSH-Schlüssel in die authorizedkeys-Datei des Ziels...
geacon
Geacon Using Go to implement CobaltStrike's Beacon This project is for learning protocol analysis and reverse engineering only, if someone's rights have been violated, please contact me to remove the project, and the last DO NOT USE IT ILLEGALLY How to play 1. Setup the teamserver and start a htt...
cobaltstrike-headless
Headless Strike Script Aggressor che trasforma il client aggressor headless in un client Cobalt Strike per lo più funzionante. Utilizzo connettiti al tuo teamserver tramite l'utility headless aggressor integrata ./agscript root@kitploit: ./agscript host port user password carica il file .cna...
CVE-2021-44228
CVE-2021-44228 نصوص برمجية للخدمات الاحترافية للمساعدة في تحديد تطبيقات Java المتأثرة في TeamServer...
CSRF vulnerability and missing permission check in contrast-continuous-application-security
contrast-continuous-application-security 3.11 and earlier does not perform a permission check in an HTTP endpoint that tests the connection to a Contrast TeamServer. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, AP...
SUSE CVE-2025-27090
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...
GO-2025-3472 SSRF in sliver teamserver in github.com/bishopfox/sliver
SSRF in sliver teamserver in github.com/bishopfox/sliver...
SSRF in sliver teamserver
Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...
GHSA-FH4V-V779-4G2W SSRF in sliver teamserver
Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...
CVE-2025-27090 Server-Side Request Forgery (SSRF) in sliver teamserver
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...
CVE-2025-27090 Server-Side Request Forgery (SSRF) in sliver teamserver
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...
CVE-2024-41111 BishopFox Sliver Authenticated Remote Code Execution
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver version 1.6.0 prerelease is vulnerable to RCE on the teamserver by a low-privileged "operator" user. The RCE is as the system root user...
PT-2024-29267 · Sliver · Sliver
Name of the Vulnerable Software and Affected Versions: Sliver version 1.6.0 prerelease Sliver versions prior to 1.6.0 Description: Sliver is an open source cross-platform adversary emulation/red team framework that can be used by organizations of all sizes to perform security testing. It is...
