29 matches found
RedCaddy
RedCaddy C2-Redirector auf Basis von Caddy Inhaltsverzeichnis Überblick Funktionen Hinweis Schnellstart Schritt für Schritt Referenzen Überblick Generiere Caddyfile mit C2-Malleable-Profilen Funktionen IPs anhand des GEOIP-Landes blockieren Anfragen per Header-Matcher zulassen User-Agent- und...
CVE-2024-415770-ssrf-rce
CVE-2024-415770-SSRF-RCE Beschreibung Dieses Skript interagiert mit dem Teamserver. Aktualisieren Sie das Skript mit Ihrer Teamserver-URL. Es führt mehrere Schritte durch, um einen Agenten zu registrieren, einen Socket zu öffnen und einen SSH-Schlüssel in die authorizedkeys-Datei des Ziels...
sleep_python_bridge
Ponte Sleep-Python do Cobalt Strike Este projeto é uma 'ponte' entre as linguagens Sleep e Python. Ele permite o controle de um teamserver do Cobalt Strike por meio de Python, sem a necessidade do cliente GUI padrão. NOTA: Este projeto está muito em fase BETA. O objetivo é fornecer um playground...
geacon
Geacon Using Go to implement CobaltStrike's Beacon This project is for learning protocol analysis and reverse engineering only, if someone's rights have been violated, please contact me to remove the project, and the last DO NOT USE IT ILLEGALLY How to play 1. Setup the teamserver and start a htt...
Havoc-C2-SSRF-poc
CVE-2024-41570: Havoc-C2-SSRF-poc Questa vulnerabilità viene sfruttata falsificando la registrazione e i check-in di un agente demon per aprire un socket TCP sul teamserver e leggere/scrivere dati da esso. Ciò consente agli attaccanti di far trapelare gli IP di origine dei teamserver e molto altr...
CVE-2024-41570-Havoc-C2-RCE
Havoc-C2-RCE CVE-2024-41570 Questa è una RCE concatenata CVE-2024-41570 nel framework Havoc C2. Iniezione di comandi: Havoc è vulnerabile all'iniezione di comandi, consentendo a un utente autenticato di eseguire comandi sul Teamserver. Interessa le versioni dalla 0.3 fino all'ultima release 0.6. ...
meteor
Meteor Eine plattformübergreifende C2/Teamserver, die mehrere Transportprotokolle unterstützt, geschrieben in Go. Hinweis: Dies befindet sich in der Entwicklung und ist daher nicht wirklich stabil. Die Dokumentation ist ebenfalls mangelhaft, wird aber im Laufe der Zeit schrittweise verbessert...
CVE-2024-28741-northstar-agent-rce-poc
NorthStar C2 Agent RCE durch Stored XSS Agent RCE PoC für CVE-2024-28741, eine Stored-XSS-Sicherheitslücke in NorthStar C2. Dieser Exploit funktioniert, indem mehrere bösartige Agent-Registrierungsanfragen an den Teamserver gesendet werden, um schrittweise ein funktionierendes JavaScript-Payload ...
cobaltstrike-headless
Headless Strike Script Aggressor che trasforma il client aggressor headless in un client Cobalt Strike per lo più funzionante. Utilizzo connettiti al tuo teamserver tramite l'utility headless aggressor integrata ./agscript root@kitploit: ./agscript host port user password carica il file .cna...
CVE-2021-44228
CVE-2021-44228 نصوص برمجية للخدمات الاحترافية للمساعدة في تحديد تطبيقات Java المتأثرة في TeamServer...
CSRF vulnerability and missing permission check in contrast-continuous-application-security
contrast-continuous-application-security 3.11 and earlier does not perform a permission check in an HTTP endpoint that tests the connection to a Contrast TeamServer. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, AP...
SUSE CVE-2025-27090
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...
GO-2025-3472 SSRF in sliver teamserver in github.com/bishopfox/sliver
SSRF in sliver teamserver in github.com/bishopfox/sliver...
SSRF in sliver teamserver
Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...
GHSA-FH4V-V779-4G2W SSRF in sliver teamserver
Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...
CVE-2025-27090 Server-Side Request Forgery (SSRF) in sliver teamserver
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...
CVE-2025-27090 Server-Side Request Forgery (SSRF) in sliver teamserver
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...
CVE-2024-41111 BishopFox Sliver Authenticated Remote Code Execution
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver version 1.6.0 prerelease is vulnerable to RCE on the teamserver by a low-privileged "operator" user. The RCE is as the system root user...
PT-2024-29267 · Sliver · Sliver
Name of the Vulnerable Software and Affected Versions: Sliver version 1.6.0 prerelease Sliver versions prior to 1.6.0 Description: Sliver is an open source cross-platform adversary emulation/red team framework that can be used by organizations of all sizes to perform security testing. It is...
