Skip to content

Latest commit

 

History

History
35 lines (26 loc) · 1.01 KB

README.md

File metadata and controls

35 lines (26 loc) · 1.01 KB

Logo botnet-ghost

Run

⚠️ Warning: This project are development

go build main.go
./main.go <file template .html>

C2 server

Server in GO with Sqlite and api, see endpoints:

  • /some-string-random?gclid=base-64

    • For new client: details of machine==ip address (Response: Command for run==id of db;id-of-command)
    • For synchronize exists client: id-of-command;id-database==response==status exited (Response: command for run==time for new request;id-of-command)

Response

The response command of server running within HTML in specific tag with template. Ex:

...
<img src='trump-idiot.jpg' class='<command-response>'/>
...

Encrypted: base64 [See T1132 technique] T1132.002

Protocol: HTTP(s) [See T1071 technique]

  • /victim (for attacker)

API for some frontend use