![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
A Command and Control (C2) Framework with secure and efficient distributed botnet management. Includes both Terminal and Web UI interfaces to accommodate different user preferences.
Component | Protocol | Port | Security Features |
---|---|---|---|
Terminal Interface | TLS 1.3 | 1337 | AES-256-GCM, P-384 ECDH |
Web Dashboard | WebSocket + TLS | 8443 | Mutual TLS, OCSP Stapling |
Bot Communication | mTLS 1.3 | 7002 | X.509 Cert Pinning, CA Verification |
Component | Status | Improvements Needed |
---|---|---|
C2 Server | 🟢 100% Complete | None |
Stress Client | 🟡 97% Complete | Expand L7/L4 methods + AMP research |
Proxy Client | 🟢 100% Complete | None |
Support Scripts | 🟢 100% Complete | None |
File | Description | Status | Recent Improvements |
---|---|---|---|
main.go | C2 Core | 🟢 Stable | REST API + Dashboard |
client.go | Client Handler | 🟡 Finalizing | IPv4/IPv6 support |
proxy.go | Proxy System | 🟢 Stable | Enhanced traffic monitoring |
README.md | Documentation | 🟡 Polishing | Video updates needed |
Script | Status | Features |
---|---|---|
SetupC2_V2.sh | ✅ Complete | Simplified deployment |
build.sh | ✅ Complete | Cross-platform (Win/Linux/Mac) |
obf_build.sh | ✅ Complete | Obfuscation + compression |
┌──────────────────────┐
│ Proxy Layer │
│ ┌─────────────────┐ │
┌─────────────┐ │ │ Proxy Client │ │ ┌─────────────┐
│ C2 Server │─────┼─►│ • Traffic Obf │ │◄────┤ Bot Fleet │
│ • Auth │◄────┼──│ • TLS 1.3 │ ├────►│ • Auto-Exec │───┐
│ • Attack Q │ │ │ • Dashboard │ │ │ • Reporting │ │
└──────┬──────┘ │ └─────────────────┘ │ └─────────────┘ │
│ └──────────┬───────────┘ ▼
▼ ▼ ┌─────────────────┐
┌──────────────┐ ┌─────────────────┐ │ Target Host │
│ Admin Portal │ │ Proxy Dashboard │ │ • Under Attack │
│ • Live Stats │ │ • Traffic Stats │ └─────────────────┘
│ • Config │ │ • Health Checks │
│ • Monitoring │ └─────────────────┘
└──────────────┘
# 1. Generate Certificates & Setup
chmod +x generate_certs.sh setup_C2.sh
./generate_certs.sh && ./setup_C2.sh
# 2. Build Server
go build -ldflags="-s -w" -o cnc main.go
# 3. Run C2
./cnc
# Essential Tools
sudo apt install -y upx-ucl openssl
# Go Packages
go get github.com/json-iterator/go \
github.com/golang-jwt/jwt/v5 \
github.com/gorilla/websocket \
github.com/rs/zerolog
# Optional Binary Packer
go install github.com/upx/upx@latest
Remember to to customize settings via config.json
Example:-![Method] IP PORT TIME KEY
Example:-![Method] 0.0.0.0 80 22 0656d970cef...
key is optional and doesn't need to be sent
adduser |
deluser |
resetpw |
db |
logs |
---|---|---|---|---|
Add user | Delete | Reset PW | Database | Audit |
ongoing |
queue |
cancel |
reinstall |
bots |
---|---|---|---|---|
Attacks | Schedule | Cancel | Reinstall | Count |
logout /exit |
clear /cls |
help |
stats |
status |
---|---|---|---|---|
Exit session | Clear screen | Help | Bot stats | C2 status |
🖥️ Multi-Arch |
👾 Anti-Debug |
♻️ Persist |
💾 Lightweight |
---|---|---|---|
x86/ARM/MIPS | Debug Detection | Auto-Run | Low Resources |
📌 Pinning |
⏱️ Rate Limit |
🕒 Sessions |
🛡️ Sanitize |
🔑 TOTP |
---|---|---|---|---|
CA Verify | IP/User Throttle | Auto Timeout | Injection Proof | 2FA Codes |
🔒 TLS 1.3 |
🔐 Bcrypt |
📊 Live Stats |
⚔️ Attack Q |
📜 Audit |
Mutual Auth | PW Hashing | Real-time | Priority | Full Logs |
Might make a video just for setup as well as to properly show it off as a whole.
Proxy Dashboard Showing off Web-ui (05/06/25) brave_CbiJ18ubL6.mp4 |
Terminal Output CLI outputs cli-demo.mp4 |
Starter Guide Login + commands Starter.mp4 |
Admin Commands Usage examples Admin.mp4 |
Attack / stress Example Filtered traffic demo attack.mp4 |
Feature Demo | Description | Preview |
---|---|---|
🚀 Starter Setup | Initial setup and certificate generation | ✅ |
💻 CLI Interface | Terminal interface and login showcase | ✅ |
🧨 Attack Management | Launching and managing attacks | ✅ |
🛡️ Admin Controls | User management, audit logs, system controls | ✅ |
🛡️ Support Scripts | Full C2 setup | ❎ |