poshc2

Deploy and manage a proxy-aware Command and Control framework with multi-language implants.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill poshc2
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: poshc2
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/c2/poshc2
Command: npx skills add https://github.com/AeonDave/malskill --skill poshc2

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a robust Command and Control (C2) framework for post-exploitation operations, designed to operate effectively in environments with network proxies and requiring versatile implant capabilities.

Core Features & Use Cases

  • Proxy-Aware C2: Maintains communication through network proxies.
  • Multi-Language Implants: Supports beacons written in PowerShell, C#, Python, and C.
  • Post-Exploitation Modules: Includes built-in tools for credential access, lateral movement, and privilege escalation.
  • Use Case: When conducting a penetration test in a corporate network with strict proxy rules, PoshC2 can establish a C2 channel and deploy implants to gather credentials and move laterally across the network.

Quick Start

Install PoshC2 by running the provided curl command and then initiate a new project.

Frequently Asked Questions about poshc2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a proxy-aware C2 framework and when do I need one for penetration testing?

A proxy-aware C2 framework maintains command and control communication through network proxies. You need one when conducting post-exploitation operations in restricted corporate networks with strict proxy rules that block direct outbound traffic.

How do I deploy implants for post-exploitation across different operating systems?

You deploy multi-language implants written in PowerShell, C#, Python, and C to execute post-exploitation tasks. This approach supports cross-platform operations across Windows, Linux, and macOS targets during penetration testing.

Does this C2 framework require a Linux server to operate?

Yes, operating this C2 framework requires a Linux server to host the command and control infrastructure. You install it via a curl command and initiate a new project before deploying implants to target machines.

Can I perform lateral movement and credential access in restricted network environments?

Yes, built-in post-exploitation modules facilitate credential access and lateral movement in restricted network environments. These tools help navigate strict proxy rules to move laterally across corporate networks.

What are the limitations of using multi-language C2 implants for red team operations?

Limitations include requiring a dedicated Linux server for operation and depending on network proxies allowing outbound communication. Implants must also evade endpoint detection across Windows, Linux, and macOS environments.

How does PoshC2 handle network proxies during red team operations?

PoshC2 is a proxy-aware C2 framework designed to maintain communication channels through network proxies. It enables red teams to establish reliable command and control infrastructure in restricted corporate networks.