https://www.youtube.com/watch?v=a1IoPvMdv-g
A Command and Control (C2) Framework with secure and efficient distributed botnet management. Includes both Terminal and Web UI interfaces to accommodate different user preferences.
| Component | Protocol | Port | Security Features |
|---|---|---|---|
| Terminal Interface | TLS 1.3 | 1337 | AES-256-GCM, P-384 ECDH |
| Web Dashboard | WebSocket + TLS | 8443 | Mutual TLS, OCSP Stapling |
| Bot Communication | mTLS 1.3 | 7002 | X.509 Cert Pinning, CA Verification |
| Component | Status | Improvements Needed |
|---|---|---|
| C2 Server | 🟢 100% Complete | None |
| Stress Client | 🟡 97% Complete | Expand L7/L4 methods + AMP research |
| Proxy Client | 🟢 100% Complete | None |
| Support Scripts | 🟢 100% Complete | None |
| File | Description | Status | Recent Improvements |
|---|---|---|---|
| main.go | C2 Core | 🟢 Stable | REST API + Dashboard |
| client.go | Client Handler | 🟡 Finalizing | IPv4/IPv6 support |
| proxy.go | Proxy System | 🟢 Stable | Enhanced traffic monitoring |
| README.md | Documentation | 🟡 Polishing | Video updates needed |
| Script | Status | Features |
|---|---|---|
| SetupC2_V2.sh | ✅ Complete | Simplified deployment |
| build.sh | ✅ Complete | Cross-platform (Win/Linux/Mac) |
| obf_build.sh | ✅ Complete | Obfuscation + compression |
┌──────────────────────┐
│ Proxy Layer │
│ ┌─────────────────┐ │
┌─────────────┐ │ │ Proxy Client │ │ ┌─────────────┐
│ C2 Server │─────┼─►│ • Traffic Obf │ │◄────┤ Bot Fleet │
│ • Auth │◄────┼──│ • TLS 1.3 │ ├────►│ • Auto-Exec │───┐
│ • Attack Q │ │ │ • Dashboard │ │ │ • Reporting │ │
└──────┬──────┘ │ └─────────────────┘ │ └─────────────┘ │
│ └──────────┬───────────┘ ▼
▼ ▼ ┌─────────────────┐
┌──────────────┐ ┌─────────────────┐ │ Target Host │
│ Admin Portal │ │ Proxy Dashboard │ │ • Under Attack │
│ • Live Stats │ │ • Traffic Stats │ └─────────────────┘
│ • Config │ │ • Health Checks │
│ • Monitoring │ └─────────────────┘
└──────────────┘
# 1. Generate Certificates & Setup
chmod +x generate_certs.sh setup_C2.sh
./generate_certs.sh && ./setup_C2.sh
# 2. Build Server
go build -ldflags="-s -w" -o cnc main.go
# 3. Run C2
./cnc# Essential Tools
sudo apt install -y upx-ucl openssl
# Go Packages
go get github.com/json-iterator/go \
github.com/golang-jwt/jwt/v5 \
github.com/gorilla/websocket \
github.com/rs/zerolog
# Optional Binary Packer
go install github.com/upx/upx@latestRemember to to customize settings via config.json
Example:-![Method] IP PORT TIME KEY
Example:-![Method] 0.0.0.0 80 22 0656d970cef...
key is optional and doesn't need to be sent
adduser |
deluser |
resetpw |
db |
logs |
|---|---|---|---|---|
| Add user | Delete | Reset PW | Database | Audit |
ongoing |
queue |
cancel |
reinstall |
bots |
|---|---|---|---|---|
| Attacks | Schedule | Cancel | Reinstall | Count |
logout/exit |
clear/cls |
help |
stats |
status |
|---|---|---|---|---|
| Exit session | Clear screen | Help | Bot stats | C2 status |
🖥️ Multi-Arch |
👾 Anti-Debug |
♻️ Persist |
💾 Lightweight |
|---|---|---|---|
| x86/ARM/MIPS | Debug Detection | Auto-Run | Low Resources |
📌 Pinning |
⏱️ Rate Limit |
🕒 Sessions |
🛡️ Sanitize |
🔑 TOTP |
|---|---|---|---|---|
| CA Verify | IP/User Throttle | Auto Timeout | Injection Proof | 2FA Codes |
🔒 TLS 1.3 |
🔐 Bcrypt |
📊 Live Stats |
⚔️ Attack Q |
📜 Audit |
| Mutual Auth | PW Hashing | Real-time | Priority | Full Logs |
Might make a video just for setup as well as to properly show it off as a whole.
| Proxy Dashboard Showing off Web-ui (05/06/25) brave_CbiJ18ubL6.mp4 |
Terminal Output CLI outputs cli-demo.mp4 |
Starter Guide Login + commands Starter.mp4 |
| Admin Commands Usage examples Admin.mp4 |
Attack / stress Example Filtered traffic demo attack.mp4 |
| Feature Demo | Description | Preview |
|---|---|---|
| 🚀 Starter Setup | Initial setup and certificate generation | ✅ |
| 💻 CLI Interface | Terminal interface and login showcase | ✅ |
| 🧨 Attack Management | Launching and managing attacks | ✅ |
| 🛡️ Admin Controls | User management, audit logs, system controls | ✅ |
| 🛡️ Support Scripts | Full C2 setup | ❎ |