Kubernetes API BIND

BIND payload for listeners/container/kubernetesapi. Operator authenticates to the cluster API kubeconfig, token, or in-cluster SA on operator host. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.kubernetesbind import buildkubernetesbindhint class ModulePayload: info...

MSSQL BIND Session

BIND payload for listeners/database/mssql !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "MSSQL BIND Session", "description": "BIND payload for listeners/database/mssql", "category":...

LDAP BIND Session

BIND payload for listeners/database/ldap !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "LDAP BIND Session", "description": "BIND payload for listeners/database/ldap", "category":...

MongoDB BIND Session

BIND payload for listeners/database/mongodb !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "MongoDB BIND Session", "description": "BIND payload for listeners/database/mongodb", "category":...

SMB Client BIND Session

BIND payload for listeners/smb/client !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "SMB Client BIND Session", "description": "BIND payload for listeners/smb/client", "category":...

MySQL BIND Session

BIND payload for listeners/database/mysql. Operator connects to the target MySQL server after credential discovery no reverse agent. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.mysqlbind import buildmysqlbindhint, buildmysqludfexecsql class ModulePayload: info =...

CVE-2026-45678

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond th...

CVE-2026-45678

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond th...

EUVD-2026-33952

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond th...

GHSA-PGVV-Q3WF-MM9M OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

Summary The Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond the end of the captured buffer and panic. Details The vulnerable logic is in pkg/ebpf/common/sqldetectpostgres.go. In th...