End User License Agreement

This End User License Agreement ("Agreement") is a legal agreement between you ("Licensee," "you," or "your") and Cyber Krait Inc. ("Cyber Krait," "we," "us," or "our"), a Canadian corporation, for the use of the Krait Command and Control Framework software, including all associated tools, documentation, templates, compiled binaries, and updates ("Software").

By purchasing a license, activating a license key, downloading, installing, or using the Software, you acknowledge that you have read, understood, and agree to be bound by the terms of this Agreement. If you do not agree, do not use the Software.

1. License Grant

Subject to the terms of this Agreement and payment of applicable fees, Cyber Krait grants you a limited, non-exclusive, non-transferable, revocable license to use the Software for the number of operator seats specified in your license. Each license key is issued to a single organization and may not be shared, sublicensed, or transferred to any third party without prior written consent from Cyber Krait.

2. Authorized Use

The Software is designed and licensed exclusively for the following lawful purposes:

• Authorized penetration testing engagements with explicit written permission from the system owner
• Red team exercises conducted under a signed Rules of Engagement (ROE) or Statement of Work (SOW)
• Purple team and adversary simulation exercises within your own organization or a client's organization under contract
• Security research in controlled lab environments
• Security training and education in authorized settings

You are solely responsible for ensuring that your use of the Software complies with all applicable local, national, and international laws and regulations. You must maintain written authorization documentation for every engagement in which the Software is deployed.

3. Prohibited Use

You may not use the Software to:

• Access, attack, disrupt, or compromise any system, network, or service without explicit written authorization from its owner
• Conduct any activity that violates applicable law, including but not limited to the Computer Fraud and Abuse Act (CFAA), the Criminal Code of Canada, or equivalent legislation in your jurisdiction
• Engage in espionage, stalking, harassment, extortion, ransomware operations, or any form of malicious activity
• Target critical infrastructure, healthcare systems, or election systems outside of explicitly authorized and scoped engagements
• Distribute, resell, sublicense, or make the Software available to unauthorized third parties

4. No Warranty

THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT. CYBER KRAIT DOES NOT WARRANT THAT THE SOFTWARE WILL BE ERROR-FREE, UNINTERRUPTED, OR FREE OF HARMFUL COMPONENTS.

The Software interacts with computer systems at a low level, including memory manipulation, process injection, and network communication. Such operations carry inherent risk. Cyber Krait makes no guarantees regarding the Software's behavior on any specific system, configuration, or environment.

5. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL CYBER KRAIT, ITS OFFICERS, DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO:

• Damage to or loss of data on production systems, test systems, or any other systems
• System downtime, service disruption, or business interruption
• Loss of revenue, profits, or business opportunities
• Costs of recovery, remediation, or incident response
• Claims by third parties arising from your use of the Software

THIS LIMITATION APPLIES WHETHER THE DAMAGES ARISE FROM USE OR MISUSE OF THE SOFTWARE, INABILITY TO USE THE SOFTWARE, OR ANY OTHER CAUSE, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE), EVEN IF CYBER KRAIT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL CYBER KRAIT'S TOTAL CUMULATIVE LIABILITY EXCEED THE LICENSE FEES ACTUALLY PAID BY YOU IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

6. Indemnification

You agree to indemnify, defend, and hold harmless Cyber Krait and its officers, directors, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to:

• Your use or misuse of the Software
• Your violation of this Agreement
• Your violation of any applicable law or regulation
• Any unauthorized access to or damage of third-party systems using the Software
• Any claim by a third party related to your use of the Software

7. Intellectual Property and Restrictions

The Software, including all source code, compiled binaries, templates, documentation, and associated materials, is the intellectual property of Cyber Krait and is protected by copyright and trade secret law. You may not:

• Copy, reproduce, or distribute the Software except as necessary for your licensed use
• Reverse engineer, decompile, or disassemble compiled components of the Software, except where expressly permitted by applicable law
• Remove, alter, or obscure any proprietary notices, watermarks, or license markings
• Share license keys, access credentials, or compiled agent templates with unlicensed parties
• Publish or disclose source code provided under a Source license tier to any party not covered by your license

8. Forensic Watermarking

You acknowledge that the Software contains forensic watermarks that uniquely identify your license in compiled agent binaries and templates. These watermarks are embedded for leak tracing and intellectual property protection. Attempting to remove, alter, or circumvent forensic watermarks is a violation of this Agreement.

9. Export Compliance

The Software may be subject to export control laws and regulations, including but not limited to the Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies, Canadian Export Controls, and similar regulations in your jurisdiction. You are responsible for compliance with all applicable export laws. You may not export or re-export the Software to any country, entity, or person prohibited by applicable export control laws.

10. Term and Termination

This Agreement is effective from the date of license activation and remains in effect for the duration of your license term. Cyber Krait may terminate this Agreement immediately and without notice if:

• You breach any term of this Agreement
• You use the Software for unauthorized or illegal purposes
• You fail to pay applicable license fees
• You are subject to sanctions or export restrictions that prohibit your use of the Software

Upon termination, you must immediately cease all use of the Software and destroy all copies in your possession, including compiled agent templates, backups, and any derivative works. Sections 4, 5, 6, 7, 8, and 12 survive termination.

11. Updates and Modifications

Cyber Krait may update this Agreement from time to time. Material changes will be communicated via the email address associated with your license. Continued use of the Software after notification constitutes acceptance of the updated terms. The current version of this Agreement is always available at krait.red/eula.

12. Governing Law and Jurisdiction

This Agreement is governed by and construed in accordance with the laws of the Province of Quebec and the federal laws of Canada applicable therein, without regard to conflict of law principles. Any dispute arising under this Agreement shall be subject to the exclusive jurisdiction of the courts of the Province of Quebec, Canada.

13. Entire Agreement

This Agreement constitutes the entire agreement between you and Cyber Krait with respect to the Software and supersedes all prior or contemporaneous communications, proposals, and agreements, whether oral or written. If any provision of this Agreement is held to be unenforceable, the remaining provisions shall continue in full force and effect.