216.73.217.22

Pupy

The MITRE Corporation · Published 16/12/2025 19:37 · Modified 27/03/2026 01:07

Essential information

Confidence
100/100
Published
16/12/2025 19:37
Modified
27/03/2026 01:07
Revoked
No
Author / Source
The MITRE Corporation
Related entities
42 attack patterns (mitre), 2 intrusion sets (apt), 1 reports

Description

[Pupy](https://attack.mitre.org/software/S0192) is an open source, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool. (Citation: GitHub Pupy) It is written in Python and can be generated as a payload in several different ways (Windows exe, Python file, PowerShell oneliner/file, Linux elf, APK, Rubber Ducky, etc.). (Citation: GitHub Pupy) [Pupy](https://attack.mitre.org/software/S0192) is publicly available on GitHub. (Citation: GitHub Pupy)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets, tools and other entities linked to this tool.

Attack patterns (MITRE) (42)

Intrusion sets (APT) (2)

  • APT33 uses HOLMIUMElfin
    The MITRE Corporation Confidence 100

    [APT33](https://attack.mitre.org/groups/G0064) is a suspected Iranian threat group that has carried out operations since at least 2013. The group has targeted organizations across multiple industries in the United States, …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:14
  • Magic Hound uses COBALT ILLUSIONITG18
    The MITRE Corporation Confidence 100

    [Magic Hound](https://attack.mitre.org/groups/G0059) is an Iranian-sponsored threat group that conducts long term, resource-intensive cyber espionage operations, likely on behalf of the Islamic Revolutionary Guard Corps. They have targeted European, …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:13

Reports (1)