78 matches found
badger-builder
badger-builder badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles. Simply provide badger-builder a flavor for your desired profile and it will prompt OpenAI for fitting configurations. Listener/payload profile configs that are AI generated: C2 URIs Request/respon...
c4-meta-system
C4-META System v1.0.0 research prototype Research prototype for multi-layer AI defense: C4 explainability, ensemble classifiers, deobfuscation, O₂ security engine, ThoughtVirus defense, and SVETILO value alignment. Alpha-grade — validated internally, external audit pending. Version: 1.0.0-alpha |...
Brute-Ratel-C4-Community-Kit
Brute-Ratel-C4 This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 https://bruteratel.com/. Anything which is added in the deprecated folder will not be a part of the latest release of BRc4...
BruteRatel-DetectionTools
BruteRatel-DetectionTools A collection of Tools and Rules for decoding Brute Ratel C4 badgers All tools and rules are based on samples identified by PaloAlto in their report https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ Yara Rule The yara rule has been tested against the samples includ...
PAKURI-THON
PAKURI-THON Pentest Achieve Knowledge Unite Rapid Interface - Python PAKURI-THON is a tool that supports pentesters with various pentesting tools and C4 server command & control and chat & communication server. PAKURI-THON can perform most of the operations with intuitive web operations and...
C4
C4 C yberdelia, a C ollection of C ommand and C ontrol frameworks Table of Contents C4 Table of Contents What is this? Cyberdelia? What is a C2 framework? Why create this repo? Format Plan for this repo Github Specific content Contribute to project Resources used What is this? This is a very flui...
PT-2026-113700
Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::remove at job without validating it. Schedule::At::remove substitutes the supplied job ID into an at...
CVE-2026-72609
An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition = orderreceive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to...
CVE-2026-72609 Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl
An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition = orderreceive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to...
CVE-2026-72607 Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age
A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = itemsbatchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...
EUVD-2026-56128
A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = itemsbatchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...
CVE-2026-72607 Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age
A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = itemsbatchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...
CVE-2026-72607
Koha SQL injection (CVE-2026-72607) is a stored, authenticated vulnerability affecting Koha up to 26.05.01 and earlier 24.11.17/25.05.12/25.11.06. An authenticated staff member with items_batchmod can store a payload in the agefield of an automatic modification rule; the value is written to a sys...
CVE-2026-72609: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition = orderreceive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to...
CVE-2026-72607: Improper Neutralization of Special Elements used in an SQL Command
A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = itemsbatchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...
PT-2026-70153
A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = items batchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...
Brute Ratel C4 - Detect
Brute Ratel C4 BRc4 is a legit red-teaming tool designed from the ground up with evasion capabilities in mind, but in the wrong hands can cause significant damage. Learn how to protect your organization with our Brute Ratel C4 Spotlight. !/usr/bin/env python3 -- coding: utf-8 -- """Brute Ratel C4...
CVE-2026-5353
A vulnerability was detected in Trendnet TEW-657BRM 1.00.1. Affected is the function pingtest of the file /setup.cgi. Performing a manipulation of the argument c4IPAddr results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The...
CVE-2021-33016
An attacker can gain full access read/write/delete to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS...