wikipedia-c2

Wikipedia-C2 Publicación del blog Wikipedia C2 Este es un proyecto de demostración para ilustrar Comando y Control utilizando Wikipedia. Después de la demostración de Josh Abraham de C2 utilizando Slack e ICMP, pensé en explorar qué otras opciones en los sitios principales de internet podrían...

kubesploit

!Licenselicense-imglicense !Downloadsdownload Kubesploit Kubesploit es un servidor y agente de Comando y Control C&C HTTP/2 multiplataforma para post-explotación, diseñado específicamente para entornos contenerizados, escrito en Golang y construido sobre el proyecto Merlin de Russel Van Tuyl...

zuthaka

Un marco de integración colaborativo gratuito y de código abierto para Comando y Control que permite a los desarrolladores concentrarse en la función principal y el objetivo de su C2. Explora la documentación » · Reportar un error · Solicitar una funcionalidad · Índice 1. Acerca del proyecto...

link

link link es un framework de comando y control escrito en Rust. Actualmente en beta. Tabla de Contenidos Introduction Features Feedback Build Process Acknowledgments Introducción link proporciona implantes para MacOS, Linux y Windows que pueden carecer de las técnicas evasivas necesarias...

Empire

Empire Empire è un framework di post-exploitation e adversary emulation utilizzato per supportare i Red Team e i Penetration Tester. Il server di Empire è scritto in Python 3 ed è modulare per consentire flessibilità all'operatore. Empire include nativamente un client che può essere utilizzato da...

phpsploit

Framework C2 completo che persiste silenziosamente sul webserver tramite una riga di PHP polimorfica Manutenibilità codeclimate Creato da nil0x42 e contributori !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb3...

gcat

Gcat Una backdoor furtiva basata su Python che utilizza Gmail come server di comando e controllo Questo progetto è ispirato al codice PoC originale di Benjamin Donnelly Questo è codice PoC... ... che è stato rilasciato per consentire alle organizzazioni di testare le proprie difese contro questi...

MAL-2026-17453 Malicious code in gocommunity.io/orderedbtree (Go)

Part of the Graphalgo campaign. The module, first published around 2026-08-11, contains a second-stage remote access trojan in plaintext that runs automatically. The RAT collects system information, executes decrypted Go or JavaScript payloads, and polls two command-and-control channels every 3-1...

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors. The attackers named the implant ted in debug strings left in the...

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

In this article 1. Risk to enterprise environments 2. Attack chain overview 3. Mitigation and response recommendations 4. Learn more Microsoft Threat Intelligence has observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT or helpdesk...

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

The U.S. Department of Justice DoJ has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 fake accounts on a freelance platform to send malware-laced Excel attachments to about 80,000 of its users in 2016 and 2017. Searzhudin Tamirlanovich Aktulaev , 40, was...

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

In this article 1. Attack chain overview 2. Campaign scope and targeting 3. Mitigation and protection guidance 4. References 5. Learn more Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribu...

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal , during a June 2026 intrusion at an unnamed communications organization in Venezuela. GoCaracal provides operators with remote shell access and...

CVE-2026-77649

The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

CVE-2026-77651

The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

EUVD-2026-63780

The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

CVE-2026-77651

The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

CVE-2026-77650

The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

CVE-2026-77650

The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

EUVD-2026-63779

The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...