Subrosa Pico is the client-side module for the Subrosa C2 framework, built for the Raspberry Pi Pico W.
It provides a lightweight loop for connecting to a server, fetching commands, executing local or remote payloads, and returning results.
The core logic is handled by main.py, which:
- Connects the Pico W to Wi-Fi
- Fetches commands from a remote server (
getcmd) - Parses and executes commands through
handle_command(cmd) - Posts results back to the server (
postresult) - Supports local payloads (Wi-Fi scanning, Bluetooth, fake AP, web server)
- Supports HID payloads for Android and iPhone
- Includes heartbeat and optional RTC/Watchdog support
This module is intended to run as a background client and communicate with a controlling C2 server.
Planned improvements and fixes:
- Shrink code footprint
- Fix RTC integration
- Fix watchdog loop
- Add exploit modules
- Add simple reverse/bind shells
- Add tunneling support
- Extend HID payload library
This project is licensed under the terms of the LICENSE file.