{"adoption": {"forks": 218, "observed_at": "2026-08-28T04:04:29.847475+00:00", "stars": 1360}, "canonical_url": "https://ross.abutalabs.com/products/boku7-loki", "card": {"archived": false, "artifact_type": "framework", "description": "🧙‍♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications", "domain": ["security", "penetration-testing", "developer-tools", "windows"], "enriched": true, "function": ["security", "penetration-testing", "cli", "gui"], "health_score": 78, "homepage": null, "language": "JavaScript", "license": "NOASSERTION", "license_family": "other", "maturity": "active", "member_repos": ["boku7/Loki"], "name": "boku7/Loki", "platform": ["windows", "cli", "cross-platform"], "pushed_at": "2026-03-27T20:09:53+00:00", "repo": "boku7/Loki", "stars": 1360, "tags": ["c2", "red-team", "electron", "script-jacking", "post-exploitation", "evasion", "command-and-control", "mitre-attack", "nodejs"], "topics": [], "urls": [], "use_cases": ["backdoor a signed Electron application without breaking its code signature", "hollow an Electron app to execute arbitrary Node.js code", "bypass Windows Defender Application Control using a trusted Electron app", "set up a C2 channel over Azure Storage blobs for red team operations", "run shellcode and assembly through a proxy-aware Chromium renderer process", "evade endpoint security software by abusing trusted applications"], "what_it_is": "Loki is a stage-1 command and control (C2) framework written in Node.js that exploits script-jacking vulnerabilities in Electron applications. It enables red team operators to backdoor or hollow signed Electron apps without invalidating their code signing signatures, using an Azure Storage Blob C2 channel with AES-encrypted, proxy-aware communications.", "when_to_avoid": ["you need a general-purpose C2 for non-Electron implant scenarios", "you lack authorization - this is an offensive security tool for red team use only", "you need a mature multi-operator teamserver with extensive implant ecosystems", "your target applications are not Electron-based"], "when_to_choose": ["you are conducting an authorized red team engagement against Windows environments with Electron applications", "you need to demonstrate MITRE ATT&CK T1218.015 script-jacking techniques", "you need a teamserver-less C2 with encrypted, proxy-aware communications", "you want to test application control and EDR evasion via signed app abuse"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/boku7-loki", "repo": "boku7/Loki", "role": "main", "score": 50}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:29.847475+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:41:38.343876+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "69b5b627b4e5bf9006bb78473195bde333c12482931a6844632443e8f13030ea", "fetched_at": "2026-08-28T04:04:29.847475+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/Loki"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 74, "longevity": 36, "rhythm": 28}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 517, "days_push": 159, "days_rel": 442, "gap_med": 32, "n_releases_24m": 4}, "score": 50, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}