Skip to content

Commit a89d418

Browse files
committed
review of northstar c2
1 parent 9ed9ea8 commit a89d418

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

documentation/modules/exploit/windows/http/northstar_c2_xss_to_agent_rce.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
## Vulnerable Application
22

33
NorthStar C2, prior to commit `7674a44` on March 11 2024, contains a vulnerability where the logs page is
4-
vulnerable to a stored xss.
5-
An unauthenticated user can simulate an agent registration to cause the XSS and take over a users session.
4+
vulnerable to a stored XSS.
5+
An unauthenticated user can simulate an agent registration to cause the XSS and take over a user's session.
66
With this access, it is then possible to run a new payload on all of the NorthStar C2 compromised hosts
77
(agents), and kill the original agent.
88

@@ -27,7 +27,7 @@ flowchart TD
2727

2828
### Install NorthStar C2
2929

30-
Instructions for Ubuntu 22.04
30+
Instructions for Ubuntu 22.04. Official documentation and manual installation steps can be found [here](https://github.com/EnginDemirbilek/NorthStarC2/wiki/Installation).
3131

3232
```
3333
sudo apt-get update

0 commit comments

Comments
 (0)