Nimbo-C2

Nimbo-C2 Nimbo-C2 About Features Installation Easy Way Easier Way Usage Limitations, Warnings, Notes Contribution About Nimbo-C2 is yet another simple and lightweight C2 framework. Nimbo-C2 agent supports x64 Windows & Linux. It's written in Nim, with some usage of .NET on Windows by dynamically...

Nimplant

Deprecated This agent is deprecated as it's only compatible with Mythic 2.1 and the main developer is not able to continue working on it. If somebody wants to make the updates in the python side of things, not nim code to the latest Mythic, we can mark it as not deprecated anymore. Nimplant is a...

conquest

Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest's team server, operator client and agent have all been developed using the Nim programming language and are designed with...

OffensiveNim

OffensiveNim My experiments in weaponizing Nim for implant development and general offensive operations. Table of Contents OffensiveNim Table of Contents Why Nim? Examples in this repo that work Examples that are a WIP Compiling the examples in this repo Easy Way Recommended Hard way For the bold...

nim-shell

Nim-Shell Shell inversa que puede evadir la detección de EDR y Windows Defender Por favor, no subas a VirusTotal INSTRUCCIONES DE INSTALACIÓN $ apt install nim Compilación nim c -d:mingw --app:gui nimshell.nim Cambia la dirección IP y el número de puerto que deseas escuchar en el archivo...

nimrm

nimrm Cliente de shell WinRM nativo escrito en Nim Versión 1.2.0 · Autor Chokri Hammedi blue0x1 · Licencia MIT Aviso legal nimrm está destinado a la administración legítima, las pruebas de seguridad y la investigación en sistemas que usted posee o para los que tiene permiso explícito de acceso. E...

grc2

nimc2 Este software se encuentra en etapas muy tempranas de desarrollo y es posible que encuentres muchos problemas al usarlo nimc2 es un C2 muy ligero escrito completamente en nim. Sus usos van desde soporte al usuario hasta monitoreo de empleados. Si quieres probarlo, consulta la wiki para...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

NimBlackout

NimBlackout Note : This project is for educational purposes only. The use of this code for any malicious activity is strictly prohibited. I am not responsible for any misuse of this software. NimBlackout is an adaptation of the @Blackout project originally developed in C++ by @ZeroMemoryEx, which...

NimDllSideload

Nim DLL Sideloading This repo allows you to easily generate Nim DLLs you can use sideloading/proxy loading. If you're unfamiliar with what DLL sideloading is, take a gander at this blog post. How do I use this? Put the legit DLL or multiple DLLs you want to proxy into the build directory of this...

nim-pentest-agent

NimPentestAgent Agent autonome de pentest intelligent pour CT...

EUVD-2021-33525

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-23171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash...

Linux Distros Unpatched Vulnerability : CVE-2021-46872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI sche...

oauth 安全漏洞

oauth is an oauth library for nim by individual developer Yoshihiro Tanaka. A security vulnerability exists in versions prior to oauth 0.11, which stems from the use of certain compiler flags to compile projects where the state parameter may not be checked, leaving it vulnerable to cross-site...

Coyote: A multi-stage banking Trojan abusing the Squirrel installer

The developers of banking Trojan malware are constantly looking for inventive ways to distribute theirs implants and infect victims. In a recent investigation, we encountered a new malware that specifically targets users of more than 60 banking institutions, mainly from Brazil. What caught our...

SUSE CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

SUSE CVE-2020-23171

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

SUSE CVE-2021-29495

Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a patch or, as a workaround, set "verifyMode = CVerifyPeer" as documented...

DEBIAN-CVE-2021-46872

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earli...