ecs-mapping

...

Striker

Striker C2 Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent...

ExternalC2

ExternalC2 A library for integrating communication channels with the Cobalt Strike External C2 server This library provides an implementation of the Cobalt Strike External C2 spec, including a basic web channel and a websocket channel. The codebase has been documented and designed to allow...

khaos-c2

KHAØS C2 KHAØS is a modern post-exploitation C2 framework with 5 covert channels and full evasion built in, created by @28Zaaky. See the documentation for full instructions. Why KHAØS...

pilotprotocol

Pilot Protocol La pila de red para agentes de IA. Direcciones. Puertos. Túneles. Cifrado. Confianza. Documentación · Especificación de Cable · Whitepaper · Borrador IETF · Habilidades de Agente · Polo Panel en Vivo Internet fue construido para humanos. Los agentes de IA no tienen dirección, ni...

ossem-power-up

OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...

islechat

isle.chat A ssh powered chat server with public and private invite-only channels Each channel has an owner who can change its banner and invite users anyone can join if its public Demo it with ssh [email protected] This project is very new right now so don't rely on it for anything critical...

ish

iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...

Cloakify

CloakifyFactory CloakifyFactory & the Cloakify Toolset - Data Exfiltration & Infiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Defeat Data Whitelisting Controls; Evade AV Detection. Text-based steganography using lists. Convert any file type e.g. executables,...

DCVC2

Discord Voice Channel C2 aka DCVC2 This multi operating system compatible tool was created to leverage Discord's voice channels for command and control operations. This tool operates entirely over the Real-Time Protocol RTP primarily leveraging DiscordGo and leaves no pesky traces behind in text...

DET

DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...

CVE-2026-61714

A flaw was found in FluidSynth, a software synthesizer. When the synth.midi-channels configuration is set above 16, the MIDI player can write beyond the allocated memory for tracking active channels. This heap buffer overflow can lead to out-of-bounds memory access, potentially compromising the...

hpfeeds

hpfeeds About hpfeeds is a lightweight authenticated publish-subscribe protocol. It has a simple wire-format so that everyone is able to subscribe to the feeds with their favorite language in almost no time. Different feeds are separated by channels and support arbitrary binary payloads. This mea...

Podcast Channels < 0.28 - Cross-Site Scripting

The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability. id: CVE-2014-4544 info: name: Podcast Channels 0.28 - Cross-Site Scripting author: daffainfo severity: medium description: The Podcast Channels WordPress plugin was...

external_c2

Sinopsis Cobalt Strike contiene una característica nueva/experimental llamada externalc2. Esto evita los perfiles maleables y permite al desarrollador crear sus propios canales. Este código es una POC, que al final resultó ser la solución a un problema de la vida real. Contenido del código...

CVE-2026-68956

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. The "session" clause of sshconnection:handlemsg/4 checks only...

CVE-2026-68956

Erlang/OTP SSH is vulnerable to unbounded session channel allocation when an authenticated remote attacker repeatedly opens session channels that are never assigned a shell, exec, or subsystem handler. The root cause is that ssh_connection:handle_msg/4 unconditionally stores a #channel{} record i...

enseal

enseal Secure, ephemeral secret sharing for developers. Stop pasting secrets into Slack. enseal makes the secure path faster than the insecure one — share .env files and secrets through encrypted, single-use channels with one command and zero setup. root@kitploit: sender $ enseal share .env Share...

ThreatIntelligenceDiscordBot

Threat Intelligence Discord Bot The vx-underground Threat Intelligence Discord Bot gets updates from various clearnet domains, ransomware threat actor domains, and Telegram channels. This bot will check for updates in intervals of 1800 seconds omit Telegram bot, this is gotten in real time. Don't...

covertchannels-steganography

Many people ask me how to start in the field of steganography/covert channels or how to improve their skills. I wrote this recopilation to help them with some good references, tools and books that I used and read I will add more soon. Books & Papers/Articles Information Hiding Techniques for...