nuclei-templates/http/technologies/nimplant-c2.yaml

id: nimplant-c2

info:
  name: NimPlant C2 Server - Detect
  author: ja1sh
  severity: info
  description: |
    NimPlant is an open source light first-stage C2 implant written in Nim and Python. It is designed to be used as a starting point for those who want to develop their own custom C2 implants. NimPlant is fully customizable and lightweight, making it easy to integrate into existing C2 frameworks.
  reference:
    - https://github.com/chvancooten/NimPlant
  metadata:
    verified: true
    max-request: 1
    shodan-query: "nimplant C2 server"
  tags: tech,nimplant,c2

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        part: header
        words:
          - "NimPlant C2 Server"

# digest: 490a004630440220242ecb9589d241337b6532339ea45e2f0cc72e4e3eda0f9307a3cc7c1bf1c1140220181fdfe3fba480c75296ba96ecd4087211a1998163982c9e531a79754b4befbf:922c64590222798bb761d5b6d8e72950
fix formatting 2023-03-02 09:56:34 +00:00			`id: nimplant-c2`
minor -update 2023-03-02 06:55:14 +00:00
			`info:`
			`name: NimPlant C2 Server - Detect`
			`author: ja1sh`
			`severity: info`
			`description: \|`
updated info,matcher,path 2023-03-02 10:11:39 +00:00			`NimPlant is an open source light first-stage C2 implant written in Nim and Python. It is designed to be used as a starting point for those who want to develop their own custom C2 implants. NimPlant is fully customizable and lightweight, making it easy to integrate into existing C2 frameworks.`
minor -update 2023-03-02 06:55:14 +00:00			`reference:`
			`- https://github.com/chvancooten/NimPlant`
			`metadata:`
boolean format update 2023-06-04 08:13:42 +00:00			`verified: true`
templateman update 2023-10-14 11:27:55 +00:00			`max-request: 1`
minor -update 2023-03-02 06:55:14 +00:00			`shodan-query: "nimplant C2 server"`
updated info,matcher,path 2023-03-02 10:11:39 +00:00			`tags: tech,nimplant,c2`
minor -update 2023-03-02 06:55:14 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
minor -update 2023-03-02 06:55:14 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}"`

			`matchers:`
			`- type: word`
			`part: header`
			`words:`
			`- "NimPlant C2 Server"`
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot: 2023-10-20 11:41:13 +00:00
			`# digest: 490a004630440220242ecb9589d241337b6532339ea45e2f0cc72e4e3eda0f9307a3cc7c1bf1c1140220181fdfe3fba480c75296ba96ecd4087211a1998163982c9e531a79754b4befbf:922c64590222798bb761d5b6d8e72950`