Mythic

Mythic A cross-platform, post-exploit, red teaming framework built with GoLang, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming. Check out a series of YouTube videos...

tf-mythic-azure

Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...

Mythic-Macro-Generator

Mythic-Macro-Generator Python3 script to generate MS Office macros for launching Mythic JXA payloads. This script generates an Office macro which uses osascript to download and execute the Mythic JXA .js payload. Steps: 1. Set up Mythic C2 server and generate an "apfell" jxa payload note: this...

Nimplant

Deprecated This agent is deprecated as it's only compatible with Mythic 2.1 and the main developer is not able to continue working on it. If somebody wants to make the updates in the python side of things, not nim code to the latest Mythic, we can mark it as not deprecated anymore. Nimplant is a...

Mystikal

Mystikal macOS 初期アクセスペイロードジェネレーター https://github.com/its-a-feature/Mythic と併用することを想定しています 関連ブログ記事: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 使用方法: 1. ビルドマシンに Xcode をインストールします インストーラープラグイン付きインストーラーパッケージに必要 2. python の依存関係をインストールします root@kitploit: sudo pip3 install -r...

fawkes

Agente C2 Fawkes Mythic Fawkes è un agente Mythic C2 interamente vibe-coded. È iniziato come un "mi chiedo" e si è trasformato in un obiettivo. Il mio obiettivo è non scrivere una singola riga di codice per questo agente, ma produrlo esclusivamente tramite prompt. Inizialmente ho tentato di...

apfell

Apfell Apfell è un payload JavaScript for Automation JXA per macOS. Questa versione supporta attualmente Mythic 2.3.+ e verrà aggiornata secondo necessità. Non funziona con Mythic 2.2 e versioni precedenti. Come installare un agente in questo formato all'interno di Mythic Quando è il momento di...

thanatos

Thanatos Thanatos è un agente C2 per Windows e Linux scritto in Rust. Installazione Per installare Thanatos, avrai bisogno di Mythic configurato su una macchina. Nella directory principale di Mythic, usa mythic-cli per installare l'agente. root@kitploit: sudo ./mythic-cli install github...

Medusa

Medusa Medusa ist ein plattformübergreifender Agent, der sowohl mit Python 3.8 als auch mit Python 2.7 kompatibel ist. Installation Zur Installation von Medusa benötigst du Mythic v3, das auf einem entfernten Computer installiert ist. Installationsanweisungen für Mythic findest du auf der...

lldp

lldp Profilo C2 Mythic per la comunicazione peer-to-peer su IEEE 802.1AB LLDP. I dati C2 sono trasportati all'interno di TLV specifici dell'organizzazione Tipo 127 con un OUI configurabile, in modo che le trame si confondano con le estensioni LLDP proprietarie dei vendor sulla rete. LLDP è solo d...

hermes

Hermes Hermes è un agente Linux leggero scritto in Python, progettato per Mythic 3.0 e successivi. Prende il nome da Hermes, messaggero degli dei — costruito per velocità e discrezione. Caratteristiche Supporto Linux Supporto proxy SOCKS5 per pivot e movimento laterale Profili C2 multipli: HTTP,...

MAL-2026-10780 Malicious code in data-parser-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63ddac8a229de35d497a342d918dbf4255d76e932db5ac33f1cf7db1a9e1939 The package's advertised parsexml/parsejson functions invoke an internal checkenvironment routine that, after a host-uptime sandbox-evasion gate 300...

Malicious code in data-parser-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63ddac8a229de35d497a342d918dbf4255d76e932db5ac33f1cf7db1a9e1939 The package's advertised parsexml/parsejson functions invoke an internal checkenvironment routine that, after a host-uptime sandbox-evasion gate 300...

Malicious code in pylogora (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfecc686b83d148b0b68acd99fe38f484c035c5b9c59fb7623378866e8e307cc pylogora/init.py invokes a at module top level, so any import pylogora triggers the payload. a base64-decodes hidden URLs and filesystem paths,...

MAL-2026-10689 Malicious code in pylogora (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfecc686b83d148b0b68acd99fe38f484c035c5b9c59fb7623378866e8e307cc pylogora/init.py invokes a at module top level, so any import pylogora triggers the payload. a base64-decodes hidden URLs and filesystem paths,...

Malicious code in log-guru (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6da98c6d79df38328235bb1df969316bd484b2a02594f8656772cd9a1e48f16b The typosquatted package installs a Mythic/Poseidon C2 framework beacon and ensures persistence. After installation, the beacon communicates with C2 on...

MAL-2026-10688 Malicious code in log-guru (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6da98c6d79df38328235bb1df969316bd484b2a02594f8656772cd9a1e48f16b The typosquatted package installs a Mythic/Poseidon C2 framework beacon and ensures persistence. After installation, the beacon communicates with C2 on...

bofhound (>=0.4.9, <=0.4.25), mseep-mcpexample (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-57952 via mythic (>=0.0.38, <=0.2.10)

mythic PYPI version =0.0.38, =0.4.9, =0.1.0, =1.0.1, =1.3.1 Source cves: CVE-2026-57952 Source advisory: SNYK:PYTHON-MYTHIC-17751535...

Incorrect Authorization

Overview mythic is an Interact with Mythic C2 Framework Instances Affected versions of this package are vulnerable to Incorrect Authorization due to a broken permission filter in the payloadbuildstep table, which uses an always-satisfied or condition that bypasses operation-scoped access controls...

bofhound (>=0.4.9, <=0.4.25), mseep-mcpexample (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2026-57951 via mythic (>=0.0.38, <=0.2.10)

mythic PYPI version =0.0.38, =0.4.9, =0.1.0, =1.0.1, =1.3.1 Source cves: CVE-2026-57951 Source advisory: SNYK:PYTHON-MYTHIC-17751534...