writeups.xyz / Unauthenticated SSRF on Havoc C2 teamserver via spoofed demon agent

Submitter : c2a

Date: 13 July 2024

Bounty : undisclosed

Vulnerabilities :

• SSRF
• Security Code Review

Programs :

• Havoc C2

Authors :

• Chebuya (@_Chebuya)

Link :
https://blog.chebuya.com/posts/server-side-request-forgery-on-havoc-c2/