[SirSkitzo]

Somehwhat like an MMS zero-day that executes a payload automatically dependent on the OS, but when they join my network. Can someone point me in the right direction?

And an auto executing MMS exploit would also be great to know if you want to point me in that direction instead.

Is BlackShades still relevant or are there better, hopefully HTTP, RATS now? How do they compare to desktop versions? It's been a while, lots of questions. I'll check the section for them in the meantime.

[CyberStrike]

I think you would have a better chance if you use social engineering, for example running a rogue AP having an http server for users to log in from there it detects the browser agent then serves a payload accordingly. As for using HTTP or HTTPS that's really up to you if it's in your network then nothing prevents you from doing it, if you are talking about having a C2 on a VPS once again that is on you. The tools are out there and minus the VPS, generally free if you are willing to spend a little time compiling and setting up whatever you wish.