tactical-exploitation

tactical-exploitation "The Other Way to Pen-Test" -- HD Moore & Valsmith 저는 항상 알려진 소프트웨어 취약점을 악용하는 데 초점을 맞추지 않고, 정보 수집 및 무차별 대입과 같은 올드 스쿨 기법에 의존하는 전술적 침투 테스트 접근법을 강력히 지지해 왔습니다. 적절한 시기의 0day가 때때로 유용하다는 점을 인식하면서도, 베테랑 침투 테스터로서 저는 익스플로잇 없는 접근법을 선호합니다. 전술적 익스플로잇은 프로세스 취약점을 활용하여 공격 탐지 및 기타 바람직하지 않은...

Vanguard-Map

VANGUARD1 — 다중 도메인 전술 정보 지도 세상의 움직이는 모든 것들에 대한 실시간 3D 지도: 실시간 선박 교통AIS, 항공기, 위성, 해저 케이블, 항구, 요충지 및 우주 날씨 — 150만 포인트 지형 구름, 주야간, 해양 시뮬레이션 및 시네마틱 카메라 워크로 렌더링됩니다. Three.js와 순수 ES 모듈로 제작되었습니다. 빌드 단계나 프레임워크가 필요 없습니다. ▶라이브 데모 — 가입 불필요: 시작 화면에서 VIEW DEMO 를 클릭하여 합성 트래픽을 보거나, 무료 aisstream.io 키를 붙여넣어 실시간 글...

CVE-2025-69516

CVE-2025-69516 - Tactical RMM 원격 코드 실행 이 저장소에는 Tactical RMM의 CVE-2025-69516 SSTI 취약점 악용을 자동화하는 Python 스크립트가 포함되어 있습니다. 버전 1.3.1에서 테스트되었습니다. 사용법 python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id" 링크 https://vulners.com/cve/CVE-2025-69516...

CVE-2025-69516

CVE-2025-69516 - Tactical RMM 원격 코드 실행 이 저장소는 Tactical RMM의 CVE-2025-69516 SSTI 취약점 악용을 자동화하는 Python 스크립트를 포함합니다. 버전 1.3.1에서 테스트되었습니다. 사용법 python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id" 링크 https://vulners.com/cve/CVE-2025-69516...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Amidaware Tactical_Rmm

C...

Metasploit Wrap-Up 03/06/2026

Encoder exposed! Some of our releases add new ways in; this one adds new ways to stay in. There are, of course, still new RCE toys in the box Tactical RMM via Jinja2 SSTI and an unauthenticated MajorDoMo exploit. Still, the underlying theme is payloads: more control over how they are packaged and...

Signed malware impersonating workplace apps deploys RMM backdoors

In February 2026, Microsoft Defender Experts identified multiple phishing campaigns attributed to an unknown threat actor. The campaigns used workplace meeting lures, PDF attachments, and abuse of legitimate binaries to deliver signed malware. Phishing emails directed users to download malicious...

📄 Tactical RMM 1.3.1 Jinja2 Server-Side Template Injection

This Metasploit module targets a server-side template injection vulnerability in Tactical RMM's template preview endpoint. The implementation is clearly marked as experimental and manually ranked due to the inherently unstable exploitation technique it relies on. The module attempts to achieve...

CBP Signs Clearview AI Deal to Use Face Recognition for ‘Tactical Targeting’

US Border Patrol intelligence units will gain access to a face recognition tool built on billions of images scraped from the internet...

Exploit for CVE-2025-69516

CVE-2025-69516 - Tactical RMM Remote Code Execution This repo...

CVE-2025-69517

An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agentid parameter accepts up to 255 characters and is improperly sanitized...

CVE-2025-69516

A Server-Side Template Injection SSTI vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the...

Tactical RMM security vulnerabilities

Tactical RMM is an open-source remote monitoring and management tool developed by AmidaWare Inc. Versions of Tactical RMM prior to v1.3.1 contained security vulnerabilities. These vulnerabilities were caused by improper handling of the templatemd parameter, which could lead to server-side templat...

Tactical RMM Jinja2 SSTI Remote Code Execution

This module exploits a Server-Side Template Injection SSTI vulnerability in Tactical RMM versions prior to 1.4.0 CVE-2025-69516. The reporting template preview endpoint passes user-controlled Jinja2 template content to Environment.fromstring without sandboxing, allowing arbitrary Python code...

CVE-2025-69516: Improper Neutralization of Special Elements Used in a Template Engine

A Server-Side Template Injection SSTI vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the...

CVE-2025-69516

A Server-Side Template Injection SSTI vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the...

PT-2026-5334

Name of the Vulnerable Software and Affected Versions Amidaware Tactical RMM versions prior to 1.3.2 Description A Server-Side Template Injection SSTI exists in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM. The issue stems from insufficient sanitization of the template md...

CVE-2025-69516

A Server-Side Template Injection SSTI vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the...

CVE-2025-69517

An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agentid parameter accepts up to 255 characters and is improperly sanitized...

CVE-2025-69517

An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agentid parameter accepts up to 255 characters and is improperly sanitized...