grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

conquest

Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest's team server, operator client and agent have all been developed using the Nim programming language and are designed with...

Nimplant

Deprecated This agent is deprecated as it's only compatible with Mythic 2.1 and the main developer is not able to continue working on it. If somebody wants to make the updates in the python side of things, not nim code to the latest Mythic, we can mark it as not deprecated anymore. Nimplant is a...

OffensiveNim

OffensiveNim My experiments in weaponizing Nim for implant development and general offensive operations. Table of Contents OffensiveNim Table of Contents Why Nim? Examples in this repo that work Examples that are a WIP Compiling the examples in this repo Easy Way Recommended Hard way For the bold...

nimrm

nimrm Native WinRM shell client written in Nim Version 1.2.0 · Author Chokri Hammedi blue0x1 · License MIT...

Nimbo-C2

Nimbo-C2 Nimbo-C2 About Features Installation Easy Way Easier Way Usage Limitations, Warnings, Notes Contribution About Nimbo-C2 is yet another simple and lightweight C2 framework. Nimbo-C2 agent supports x64 Windows & Linux. It's written in Nim, with some usage of .NET on Windows by dynamically...

nim-shell

Nim-Shell EDRおよびWindows Defenderの検出をバイパスできるリバースシェル VirusTotalにアップロードしないでください 𝗜𝗡𝗦𝗧𝗔𝗟𝗟𝗔𝗧𝗜𝗢𝗡 𝗜𝗡𝗦𝗧𝗥𝗨𝗖𝗧𝗜𝗢𝗡𝗦 root@kitploit: $ apt install nim コンパイル nim c -d:mingw --app:gui nimshell.nim nimshell.nimファイル内のリッスンしたいIPアドレスとポート番号をデバイスに合わせて変更してください。 そしてリッスン root@kitploit: $ nc -nvlp 4444...

grc2

nimc2 此软件尚处于非常早期的开发阶段，使用过程中可能会遇到许多问题 nimc2 是一款使用 nim 语言完全编写的非常轻量级的 C2。其用途范围涵盖用户支持到员工监控。 如果你想尝试一下，请查看 wiki 了解如何安装和使用 nimc2。它的特性包括： 生成 Windows 和 Linux 植入体 TCP 套接字和 HTTP 通信 能够创建任意数量的监听器 完善的任务系统 用于存储截图和下载文件的战利品系统 可自定义的模块，用于扩展植入体的自定义功能 易用的命令行界面 ……以及即将推出的更多功能 加入 discord 讨论此项目。 Wiki 快速上手 安装 Nimc2 快速入门...

NimBlackout

NimBlackout 注意 ：本项目仅供教育目的。将本代码用于任何恶意活动均被严格禁止。我对本软件的任何滥用概不负责。 NimBlackout 是对 @Blackout 项目的改编，该项目最初由 @ZeroMemoryEx 使用 C++ 开发，其原理是利用 gmer（BYOVD）驱动移除 AV/EDR。 本项目的主要动机是理解 BYOVD 攻击的工作原理，并提供一个用 Nim 编写的有效 PoC。 所有功劳归于原作者 @ZeroMemoryEx。 用法 编译 Linux root@kitploit: nim --os:windows --cpu:amd64...

NimDllSideload

Nim DLL Sideloading This repo allows you to easily generate Nim DLLs you can use sideloading/proxy loading. If you're unfamiliar with what DLL sideloading is, take a gander at this blog post. How do I use this? Put the legit DLL or multiple DLLs you want to proxy into the build directory of this...

nim-pentest-agent

NimPentestAgent Agent autonome de pentest intelligent pour CT...

EUVD-2021-33525

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-23171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash...

Linux Distros Unpatched Vulnerability : CVE-2021-46872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI sche...

oauth 安全漏洞

oauth is an oauth library for nim by individual developer Yoshihiro Tanaka. A security vulnerability exists in versions prior to oauth 0.11, which stems from the use of certain compiler flags to compile projects where the state parameter may not be checked, leaving it vulnerable to cross-site...

Coyote: A multi-stage banking Trojan abusing the Squirrel installer

The developers of banking Trojan malware are constantly looking for inventive ways to distribute theirs implants and infect victims. In a recent investigation, we encountered a new malware that specifically targets users of more than 60 banking institutions, mainly from Brazil. What caught our...

SUSE CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

SUSE CVE-2020-23171

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

SUSE CVE-2021-29495

Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a patch or, as a workaround, set "verifyMode = CVerifyPeer" as documented...

DEBIAN-CVE-2021-46872

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earli...