Elite

非推奨（一時的） 親プロジェクトである Covenant は、もはやクライアントサイドアプリケーションを必要としません。Elite は一時的に非推奨となりました。代わりに、Covenant プロジェクトに含まれる Web インターフェースを使用してください。 Elite は、いずれ Covenant プロジェクトに合わせて代替インターフェースとして最新の状態に更新される可能性がありますが、現時点ではこのプロジェクトは更新されておらず、Covenant v0.3 以降では動作しません。 Elite Elite は、Covenant と対話するために構築された .NET Core...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

Covenant

Covenantは、.NETの攻撃面を明らかにし、攻撃的な.NETのトレードクラフトの利用を容易にし、レッドチーム向けの共同指揮統制プラットフォームとして機能することを目的とした、.NETベースのコマンド＆コントロールフレームワークです。 CovenantはASP.NET Core製のクロスプラットフォームアプリケーションで、Webベースのインターフェースを通じてマルチユーザーでのコラボレーションを可能にします。 クイックスタートガイド Covenantを使い始めるには、インストールと起動ガイドをご覧ください！...

C2Bridge

C2Bridgeを使用すると、開発者は新しいカスタム通信プロトコルを作成し、Covenant内ですぐに利用できます。 C2Bridges...

CovenantDecryptor

CovenantDecryptor CovenantDecryptor 旨在解密 Covenant 流量的通信数据。 由于使用 RSACryptoServiceProvider 创建密钥，从内存中提取私钥的方法也适用于其他 C2，例如 Empire。 Covenant 通信是如何工作的？ Covenant 通信初始化包含 3 个阶段： 阶段 0： 1. 受感染代理通过传输一个使用 SetupAESKey 加密的公钥来发起 RSA 会话，SetupAESKey 嵌入在恶意可执行文件中。发送前，它会按照 GruntHTTPStager 中的描述格式化文本，并将类型设置为 0。 2. C2...

CVE-2026-92717

Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...

CVE-2026-92717 Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub

Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...

EUVD-2026-80900

Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...

CVE-2026-92717 Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub

Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...

CVE-2026-92717

Covenant through version 0.6 registers its CovenantHub SignalR hub without an Authorize attribute , allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token . With that token, an attacker can authenticate against the entire operator API and access grunts, crede...

CVE-2026-92717 Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub

Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...

CVE-2026-92717: Missing Authentication for Critical Function

Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts,...

APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shar...

CVE-2020-36911

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...

CVE-2020-36911

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...

CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...

CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...

CVE-2020-36911

CVE-2020-36911 affects Covenant versions 0.1.3 through 0.5, described as a remote code execution vulnerability where an attacker can forge JWT tokens with administrative privileges and upload DLL payloads to execute arbitrary commands on the target system. The threat relies on forging tokens to g...

Covenant 信任管理问题漏洞

Covenant is a .NET framework by Ryan Cobb Personal Developer. A trust management issue vulnerability exists in Covenant versions 0.1.3 through 0.5, which stems from an attacker being able to spoof a malicious JWT token with administrator privileges, potentially leading to remote code execution...

CVE-2020-36911: Use of Hard-coded Credentials

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...