mirror of https://github.com/SquidSec/SquidC5 synced 2026-08-09 12:22:26 +00:00

Files

T

Mr. The Plague 4aefe7595a Rebrand SquidSeC2 to SquidC5 across package, CLI, and deploy

Rename Python package squidsec2→squidc5, CLI ss2→sc5, env SQUIDSEC2_*→SQUIDC5_*,
token prefix sc5_ (legacy ss2_ still accepted), Docker/docs/UI branding, and
GitHub repo to DotNetRussell/SquidC5.

2026-07-17 08:14:08 -04:00

1012 B

Raw Blame History

Security Policy

Supported Versions

Version	Supported
0.1.x	Yes

Responsible Disclosure

If you discover a security vulnerability in SquidC5:

Do not open a public GitHub issue
Contact the maintainers privately via GitHub Security Advisories on this repository
Include steps to reproduce, impact assessment, and suggested remediation if available
Allow reasonable time for a fix before public disclosure

Scope Notes

SquidC5 is a C2 framework for authorized testing. Issues related to:

Authentication/token bypass
MCP tool allow-list bypass
Admin AI prompt-injection escapes
Policy engine bypass
Audit log tampering

are considered high priority.

Safe Harbor

We will not pursue legal action against researchers who:

Act in good faith
Avoid privacy violations and data destruction
Do not exploit findings beyond what is needed to demonstrate the issue
Report promptly and keep findings confidential until fixed