c2

This Skill establishes a secure command and control infrastructure by providing framework-agnostic C2 channels like HTTPS, DNS, mTLS, and WireGuard for post-exploitation operations. It automates listener deployment and implant configuration to ensure covert communication and persistence.

The available C2 implant modes are beacon, session, and stager. These modes support persistence, interaction, and delivery respectively, allowing flexible command and control communication tailored to different post-exploitation operational requirements.

Yes, this Skill integrates with Sliver and Havoc to automate command and control infrastructure. It deploys a reverse proxy redirector architecture with configurable filters, requiring Docker, Python, and Nginx to establish secure communication channels.

Malleable C2 profiles evade detection by generating custom configurations that mimic legitimate network traffic. This Skill provides malleable profile generation alongside detection signature guidance to actively reduce the risk of identifying command and control activity.

Prerequisites for deploying a secure C2 framework include Docker, Python, and Nginx environments. Additionally, you need working knowledge of command and control frameworks like Sliver and Havoc, alongside a strong understanding of post-exploitation practices.

After establishing a command and control channel, the next steps involve credential access, lateral movement, defense evasion, and persistence. This Skill provides a decision gate roadmap to guide these subsequent post-exploitation actions effectively.