sliver-gui

Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

CVE-2025-59470-PostgreSQL-Command-Injection

Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3. Vulnerability Type: Command injection in the pgbackup extension. Description: The pgbackup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as...

trivy-operator

Kit de herramientas de seguridad nativo de Kubernetes. Documentación Introducción El Trivy Operator aprovecha Trivy para escanear continuamente tu clúster de Kubernetes en busca de problemas de seguridad. Los escaneos se resumen en informes de seguridad como Definiciones de recursos personalizado...

chaos-operator

Litmus chaos-operator for injecting chaos experiments on Kubernetes Codacy Badge Litmus chaos operator is used by Kubernetes application developers and SREs to inject chaos into the applications and Kubernetes infrastructure in a managed fashion. Its objective is to make the process of validation...

GeckoDroid

GeckoDroid Mobile client for Adaptix C2 Framework. Full operator access from your Android device. What it does GeckoDroid gives you control over your Adaptix C2 server from anywhere. Instead of sitting at your desktop client, you can manage operations on the go. Agents - See all connected agents...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

nebula

Nebula AI Powered Pentesting Nebula 3 project overview Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser...

starboard

Starboard se une a Trivy. Hemos anunciado nuestros planes de discontinuar Starboard y fusionarlo con Trivy. La CLI de Starboard se ha reintroducido como el comando trivy kubernetes y starboard-operator con un enfoque en las capacidades de trivy está disponible como Trivy-Operator. No aceptaremos...

renovate-operator

Renovate: la forma nativa de Kubernetes Ejecuta Renovate en tu propia infraestructura con programación basada en CRD, ejecución en paralelo, autodescubrimiento y una interfaz de usuario integrada. Si autoalojas Renovate y ya ejecutas Kubernetes, este operador te brinda el control y la...

CVE-2025-51401

Exploit Title: LiveHelperChat 4. Save the changes. 5. Initiate a chat with a visitor. 6. Transfer the chat to another operator — the XSS payload executes in the receiving operator’s chat interface...

BackupOperatorToolkit

BackupOperatorToolkit Uso El BackupOperatorToolkit BOT tiene 4 modos diferentes que permiten escalar de Operador de Respaldo a Administrador de Dominio. Ejecute "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" antes de ejecutar la herramienta. Modo Servicio El modo SERVICIO crea...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, keycloak, apache-nifi, wildfly, cass-config-builder, strimzi-kafka-operator, trino, sonarqube, scala, spdx-tools-java, infinispan, druid, apache-nifi-registry, apache-tika, spark, tez, apicurio-registry, gradle, opensearch, flyway, akhq,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, keycloak, apache-nifi, wildfly, cass-config-builder, strimzi-kafka-operator, trino, sonarqube, scala, spdx-tools-java, infinispan, druid, apache-nifi-registry, apache-tika, spark, tez, apicurio-registry, gradle, opensearch, flyway, akhq,...

CVE-2025-51397

Exploit Title: LiveHelperChat 4. Save the changes. 5. This payload is stored and later executed when an admin or higher-...

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: cruise-control, hono, wavefront-proxy, kafbat-ui, cass-config-builder-fips, flyway-fips, dependency-track-apiserver, logstash, thingsboard, ontop, cassandra-fips, kates, seata, airbyte-platform-fips, tez, flink-kubernetes-operator, strimzi-kafka-operator, cassandra,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: cruise-control, hono, wavefront-proxy, kafbat-ui, cass-config-builder-fips, flyway-fips, dependency-track-apiserver, logstash, thingsboard, ontop, cassandra-fips, kates, seata, airbyte-platform-fips, tez, flink-kubernetes-operator, strimzi-kafka-operator, cassandra,...