grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

OffensiveNim

OffensiveNim My experiments in weaponizing Nim for implant development and general offensive operations. Table of Contents OffensiveNim Table of Contents Why Nim? Examples in this repo that work Examples that are a WIP Compiling the examples in this repo Easy Way Recommended Hard way For the bold...

Nimplant

Deprecated This agent is deprecated as it's only compatible with Mythic 2.1 and the main developer is not able to continue working on it. If somebody wants to make the updates in the python side of things, not nim code to the latest Mythic, we can mark it as not deprecated anymore. Nimplant is a...

grc2

nimc2 Это программное обеспечение находится на очень ранней стадии разработки, и при его использовании вы можете столкнуться со многими проблемами. nimc2 — это очень легковесный C2, написанный полностью на nim. Его применение варьируется от поддержки пользователей до мониторинга сотрудников. Если...

NimBlackout

NimBlackout Nota : Questo progetto è solo a scopo educativo. L'uso di questo codice per qualsiasi attività dannosa è severamente vietato. Non sono responsabile di qualsiasi uso improprio di questo software. NimBlackout è un adattamento del progetto @Blackout originariamente sviluppato in C++ da...

NimDllSideload

Nim-DLL-Sideloading Mit diesem Repo kannst du einfach Nim-DLLs erzeugen, die du zum Sideloading/Proxy Loading verwenden kannst. Wenn du nicht weißt, was DLL-Sideloading ist, wirf einen Blick auf diesen Blogbeitrag. Wie benutze ich das? Lege die legitime DLL oder mehrere DLLs, die du als Proxy...

nimrm

nimrm Nativer WinRM-Shell-Client, geschrieben in Nim Version 1.2.0 · Autor Chokri Hammedi blue0x1 · Lizenz MIT...

nim-shell

Nim-Shell Reverse shell in grado di bypassare il rilevamento di EDR e Windows Defender Si prega di non caricare su VirusTotal 𝗜𝗡𝗦𝗧𝗔𝗟𝗟𝗔𝗧𝗜𝗢𝗡 𝗜𝗡𝗦𝗧𝗥𝗨𝗖𝗧𝗜𝗢𝗡𝗦 root@kitploit: $ apt install nim Compilazione nim c -d:mingw --app:gui nimshell.nim Modifica l'indirizzo IP e la porta che desideri ascoltare nel...

Nimbo-C2

Nimbo-C2 Nimbo-C2 Informazioni Caratteristiche Installazione Modo facile Modo più facile Utilizzo Limitazioni, Avvertenze, Note Contributi Informazioni Nimbo-C2 è un altro framework C2 semplice e leggero. L'agente Nimbo-C2 supporta Windows e Linux x64. È scritto in Nim, con qualche uso di .NET su...

conquest

Conquest ist ein funktionsreiches, erweiterbares und anpassbares Command & Control-/Post-Exploitation-Framework, das für Penetrationstests und Gegnersimulation entwickelt wurde. Der Team-Server, der Operator-Client und der Agent von Conquest wurden alle mit der Programmiersprache Nim entwickelt u...

nim-pentest-agent

NimPentestAgent Agent autonome de pentest intelligent pour CT...

EUVD-2021-33525

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-23171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash...

Linux Distros Unpatched Vulnerability : CVE-2021-46872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI sche...

oauth 安全漏洞

oauth is an oauth library for nim by individual developer Yoshihiro Tanaka. A security vulnerability exists in versions prior to oauth 0.11, which stems from the use of certain compiler flags to compile projects where the state parameter may not be checked, leaving it vulnerable to cross-site...

Coyote: A multi-stage banking Trojan abusing the Squirrel installer

The developers of banking Trojan malware are constantly looking for inventive ways to distribute theirs implants and infect victims. In a recent investigation, we encountered a new malware that specifically targets users of more than 60 banking institutions, mainly from Brazil. What caught our...

SUSE CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

SUSE CVE-2020-23171

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

SUSE CVE-2021-29495

Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a patch or, as a workaround, set "verifyMode = CVerifyPeer" as documented...

DEBIAN-CVE-2021-46872

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earli...