| 제목 | CosmodiumCS OnlyRAT Latest version available OS Command Injection |
|---|
| 설명 | OnlyRAT, a C2 developed by CosmodiumCS, is vulnerable to OS command injection due to unsafe usage of Python’s os.system() function throughout its codebase. Configuration values are inserted directly into shell commands without sanitization or escaping. This design flaw allows attackers to execute arbitrary system commands by supplying a crafted configuration file.
|
|---|
| 원천 | ⚠️ https://docs.google.com/document/d/1oq9YO831FbEDBI2BqNiW-7YA_kMzHJmMgy82F8f-L9g/edit?usp=sharing |
|---|
| 사용자 | unhingedazrael (UID 89347) |
|---|
| 제출 | 2025. 09. 04. PM 08:31 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 09. 21. AM 10:09 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 325123 [CosmodiumCS OnlyRAT 까지 3.2 Configuration File main.py connect/remote_upload/remote_download configuration["PASSWORD"] 권한 상승] |
|---|
| 포인트들 | 19 |
|---|