NimPlant

NimPlant is back for Black Hat season! This release adds a fully-featured Rust implant besides the "classic" Nim version. The Rust implant is written from scratch and is designed to be more conscious about memory management (e.g. configuration parsing), while supporting all the goodies that the Nim version does¹. The release also adds Docker for all your (cross-)compilation or server hosting needs...

New features

• Ekko sleep obfuscation can now be used in non-exe payloads #25
  • Thanks @notb9!

Enhancements

• Improve quoted command parsing, allow non-UTF8 decoding for cat via fallback encodings, fix gzip issue behind AWS lambda, fix niche issue with old SSL support, improve server logging and exception handling #28
  • Thanks @yamakadi!
• Major refactor of the Nim...

New features

• Add command tab completion to GUI (in addition to arrow keys)

Enhancements

• Add Nimplant info to download gui
  • Closes #12
• [Improve error handling for 'cleanup' command](https://g...

New features

• Added new screenshot command (Close #7)
• Added GUI modal for shinject command (Close #2)

Enhancements

• The reg command is now able to list all values in a key by specifying the query sub-command with only the path
• Added utility cleanup command to NimPlant.py to easily clean up server data (logs, uploads, downloads, database)
• Tweaked detection rule p...

NimPlant v1.0: Initial public release 🥳