Skip to content

NimPlant C2 Server - Detect

ID: nimplant-c2

Severity: info

Author: ja1sh

Tags: tech,nimplant,c2

NimPlant is an open source light first-stage C2 implant written in Nim and Python. It is designed to be used as a starting point for those who want to develop their own custom C2 implants. NimPlant is fully customizable and lightweight, making it easy to integrate into existing C2 frameworks.

id: nimplant-c2
info:
name: NimPlant C2 Server - Detect
author: ja1sh
severity: info
description: |
NimPlant is an open source light first-stage C2 implant written in Nim and Python. It is designed to be used as a starting point for those who want to develop their own custom C2 implants. NimPlant is fully customizable and lightweight, making it easy to integrate into existing C2 frameworks.
reference:
- https://github.com/chvancooten/NimPlant
metadata:
verified: true
max-request: 1
shodan-query: "nimplant C2 server"
tags: tech,nimplant,c2
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: word
part: header
words:
- "NimPlant C2 Server"
# digest: 4b0a00483046022100f3013c374f46bc4589cf64fa67173fc60ae439daf42190963a18197f6af602f9022100bdb17b2b7c2002f43127d2459a63ecb97568c311f809eac4bfab0349c57eec4d:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/nimplant-c2.yaml"

View on Github