Jan 26, 2026 04:50 PM
(This post was last modified: Jan 26, 2026 05:13 PM by G_Lock.)
A fully-featured Command & Control (C2) framework built from scratch in C/C++ for educational purposes and authorized security testing.
Disclaimer
This tool is for educational purposes and authorized penetration testing only. Only use on systems you own or have explicit written permission to test. Unauthorized access to computer systems is illegal.
Features
Implant Capabilities
Category Features
Reconnaissance System info, process listing, network connections, AV detection
Persistence Registry run keys, scheduled tasks, startup folder
File Operations Upload, download, screenshot capture
Credential Harvesting Windows Credential Manager, WiFi passwords, Chrome passwords, SAM hashes
Surveillance Keylogger, webcam capture
Evasion Anti-debug, anti-VM, anti-sandbox, AMSI bypass, ETW bypass
Stealth No console window, string encryption, jittered beacons
Built-in Commands
COMMAND DESCRIPTION
────────────── ─────────────────────────────────────
help Show available commands
sysinfo Detailed system info + AV detection
ps List running processes
kill <pid> Kill process by PID
netstat Show network connections
screenshot Capture screen
download Exfiltrate file to server
persist Install persistence (registry|schtask|startup)
unpersist Remove all persistence
selfdestruct Remove traces and delete self
keylog_start Start keylogger (background)
keylog_stop Stop keylogger
keylog_dump Dump captured keystrokes
webcam Capture webcam (list|capture)
inject Process injection/migration
creds Dump credentials (all|wifi|chrome|sam)
Github: dm for link
Disclaimer
This tool is for educational purposes and authorized penetration testing only. Only use on systems you own or have explicit written permission to test. Unauthorized access to computer systems is illegal.
Features
Implant Capabilities
Category Features
Reconnaissance System info, process listing, network connections, AV detection
Persistence Registry run keys, scheduled tasks, startup folder
File Operations Upload, download, screenshot capture
Credential Harvesting Windows Credential Manager, WiFi passwords, Chrome passwords, SAM hashes
Surveillance Keylogger, webcam capture
Evasion Anti-debug, anti-VM, anti-sandbox, AMSI bypass, ETW bypass
Stealth No console window, string encryption, jittered beacons
Built-in Commands
COMMAND DESCRIPTION
────────────── ─────────────────────────────────────
help Show available commands
sysinfo Detailed system info + AV detection
ps List running processes
kill <pid> Kill process by PID
netstat Show network connections
screenshot Capture screen
download Exfiltrate file to server
persist Install persistence (registry|schtask|startup)
unpersist Remove all persistence
selfdestruct Remove traces and delete self
keylog_start Start keylogger (background)
keylog_stop Stop keylogger
keylog_dump Dump captured keystrokes
webcam Capture webcam (list|capture)
inject Process injection/migration
creds Dump credentials (all|wifi|chrome|sam)
Github: dm for link

