A modern C2 (Command & Control) platform built with Go, React, and Zig.

Real-time overview of your infrastructure with key metrics and activity monitoring.

Features:

• Multi-platform support: Linux x64/x86/ARM64/ARM
• Real-time status monitoring with heartbeat tracking
• OS-specific icons (Ubuntu, Debian, CentOS, Arch, Fedora, Alpine, Kali, etc.)
• Batch operations: delete multiple implants, bulk jitter updates
• Advanced filtering, sorting, and pagination
• Root/Admin user highlighting
• Process name masquerading for stealth

Features:

• HTTP/HTTPS listener support
• Stage listener for shellcode delivery
• Start/Stop control with status monitoring
• Configurable host, port, and endpoints

Features:

• Stager: Lightweight downloader that fetches and executes shellcode in memory
• Implant: Full-featured agent with BOF execution capability
• Multiple output formats: ELF, Shellcode (.bin), Shared Library (.so)
• Cross-compilation: x64, x86, ARM64, ARM
• Process name customization for /proc/pid/cmdline masquerading
• Real-time build progress with streaming logs
• Language options: Zig (default), C

Built-in BOFs:

• shell - Execute shell commands and return output
• spawn - Spawn a background process (daemonized, no shell residue)
• memexec - Execute ELF binary from memory without touching disk (supports stealth mode)
• revshell - Spawn an interactive reverse shell via HTTP hijack
• socks5 - Start SOCKS5 proxy tunnel through implant
• tcpScanner - Scan TCP ports on target hosts
• ifconfig - Display network interface information
• cat - Read file contents
• ls - List directory contents
• env - Display environment variables
• uname - System information
• whoami - Current user information
• pwd - Print working directory

Features:

• Beacon Object File (BOF) support for post-exploitation
• Task queue with status tracking (pending, running, completed, failed)
• Detailed task output with timestamps
• Support for custom BOF development

Features:

• SOCKS5 proxy tunneling through implant
• Username/password authentication support
• Auto-generated random credentials for security
• Custom process name masquerading (e.g., [kworker/u8:2-events_unbound])
• Process isolation: proxy daemon runs with PPID=1 (no association with implant)
• Multiple proxy servers per implant
• One-click proxy URL copy to clipboard
• Remote daemon shutdown via web UI

Features:

• Real-time interactive shell via HTTP hijack
• Multiple shell sessions per implant
• Session history with timestamps
• Syntax highlighting for terminal output
• Minimal footprint (single bash process)
• Process isolation: shell runs with PPID=1 (no association with implant)
• Integrated into implant management panel

MIT