Locked ExploitsNorthStar C2 Agent 1.0 Cross Site Scripting / Remote Command Execution

[1337day-Exploits]

NorthStar C2 agent version 1.0 applies insufficient sanitization on agent registration routes, allowing an unauthenticated attacker to send multiple malicious agent registration requests to the teamserver to incrementally build a functioning javascript payload in the logs web page. This cross site scripting payload can be leveraged to execute commands on NorthStar C2 agents.

This is the hidden content, please

• Sign In
• or
• Sign Up