mythic_telegram_profile

Mythic용 Telegram C2 프로필 Telegram은 Athena 및 Apollo 에이전트를 위한 Mythic C2 프로필을 제공합니다. 이는 Telegram 비공개 봇 간 메시지를 전송 수단으로 사용하고, Mythic의 Push C2 gRPC 서비스를 컨트롤러 브리지로 사용합니다. 아키텍처 Athena 또는 Apollo 에이전트 봇 Telegram Bot API 컨트롤러 봇 Telegram C2 서비스 Mythic 실행 중인 각 에이전트는 자체 Bot API 토큰을 사용합니다. C2 서비스는 하나의 컨트롤러 봇 토큰을...

Apollo

Apollo Простая и лёгкая утилита удалённого доступа, написанная на Python Apollo — кроссплатформенный Windows, Linux, FreeBSD и MacOS инструмент удалённого доступа для Python 3.4+. Его возможности пока очень базовые, но позволяют выполнять команды после эксплуатации, а также получать информацию о...

POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability

CVE-2026-32621 - Apollo Federation Prototype Pollution PoC Обзор Поле| Значение ---|--- CVE| CVE-2026-32621 CVSS| 9.9 Критический CWE| CWE-1321 Prototype Pollution Затронуто| Apollo Federation 2.9.6, 2.10.5, 2.11.6, 2.12.3, 2.13.2 Исправлено| 2.9.6, 2.10.5, 2.11.6, 2.12.3, 2.13.2 GHSA|...

GraphCrawler

GraphCrawler LE Kit de test automatisé GraphQL Graph Crawler est le kit de test automatisé le plus puissant pour tout endpoint GraphQL. La version 1.2 est sortie !! NOUVEAU : peut rechercher des endpoints pour vous en utilisant le puissant outil Graphinder d'Escape Technology. Il suffit de le...

apollo-koa-minimal

CVE-2023-26144...

IntelTXE-PoC

면책 조항 모든 정보는 교육 목적으로만 제공됩니다. 본 지침을 따르는 것은 전적으로 사용자 본인의 책임입니다. 저자나 저자의 고용주는 이 페이지에 포함된 정보에 근거하여 행동하거나 행동하지 않은 개인 또는 조직으로 인해 발생하는 직접적 또는 결과적 손해나 손실에 대해 책임을 지지 않습니다. 목차 소개 필수 소프트웨어 페이로드 생성 잠금 해제 토큰 생성 SPI 플래시 이미지 준비 펌웨어 이미지에 파일 통합 OEM 서명 비활성화 펌웨어 이미지 빌드 메인 CPU BringUP SPI 플래시에 이미지 쓰기 USB 디버그 케이블 준비...

ROOT-APP-NPM-CVE-2025-64530 CVE-2025-64530 in @apollo/composition - Patched by Root

Root has patched CVE-2025-64530 in the @apollo/composition package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-M8JR-FXQX-8XX6 GHSA-m8jr-fxqx-8xx6 in @apollo/composition - Patched by Root

Root has patched GHSA-m8jr-fxqx-8xx6 in the @apollo/composition package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-23897 CVE-2026-23897 in @apollo/server - Patched by Root

Root has patched CVE-2026-23897 in the @apollo/server package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-32030 CVE-2025-32030 in @apollo/gateway - Patched by Root

Root has patched CVE-2025-32030 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-43414 CVE-2024-43414 in @apollo/gateway - Patched by Root

Root has patched CVE-2024-43414 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-32031 CVE-2025-32031 in @apollo/gateway - Patched by Root

Root has patched CVE-2025-32031 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...

Exploit for CVE-2026-32621

CVE-2026-32621 - Apollo Federation Prototype Pollution PoC...

Improper Authentication

Apollo ConfigService is vulnerable to Improper Authentication. The vulnerability is due to improper validation of non-canonical appId values during authentication, which allows an attacker to bypass AccessKey or management key protections and gain unauthorized access to protected configuration da...

Improper Authorization

Apollo Portal is vulnerable to Improper Authorization. The vulnerability is due to missing application and namespace permission checks when retrieving releases by ID, which allows an authenticated low-privileged user to access unauthorized release data by supplying a valid release ID...

CVE-2026-59955

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized access to raw configuration data when AccessKey or management key authentication is enabled because requests under...

CVE-2025-32781

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...

EUVD-2025-210473

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...

CVE-2025-32781

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...

CVE-2025-32781 Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...