{"id":46459464,"url":"https://github.com/skoveit/skovenet","last_synced_at":"2026-03-06T03:03:49.679Z","repository":{"id":341490104,"uuid":"1106771354","full_name":"skoveit/skovenet","owner":"skoveit","description":"Decentralized Adversary Emulation Framework","archived":false,"fork":false,"pushed_at":"2026-03-02T01:49:51.000Z","size":24174,"stargazers_count":7,"open_issues_count":2,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-03-02T04:52:02.902Z","etag":null,"topics":["adversarial-attacks","adversary-simulation","adversry","c2","command-and-control","golang","nostalgia","red-team-engagement","red-teaming"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/skoveit.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-11-29T22:52:37.000Z","updated_at":"2026-03-02T01:49:55.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/skoveit/skovenet","commit_stats":null,"previous_names":["skoveit/skovenet"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/skoveit/skovenet","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skoveit%2Fskovenet","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skoveit%2Fskovenet/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skoveit%2Fskovenet/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skoveit%2Fskovenet/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/skoveit","download_url":"https://codeload.github.com/skoveit/skovenet/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skoveit%2Fskovenet/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30160041,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-05T22:39:40.138Z","status":"online","status_checked_at":"2026-03-06T02:00:08.268Z","response_time":250,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["adversarial-attacks","adversary-simulation","adversry","c2","command-and-control","golang","nostalgia","red-team-engagement","red-teaming"],"created_at":"2026-03-06T03:03:48.854Z","updated_at":"2026-03-06T03:03:49.669Z","avatar_url":"https://github.com/skoveit.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"\n**SkoveNet** is a decentralized Command \u0026 Control (C2) framework engineered to eliminate Single Points of Failure and ensure maximum operator anonymity.\n\nUnlike traditional client-server C2 models, SkoveNet implements a decoupled Agent-Controller architecture. This allows the operator to interface with the network through any active node, removing the dependency on a static command center and obfuscating the operator's physical location.\n\n![structure diagram](static/structure_diagram.png)\n**No server. No domain. No single point of failure.**\n\n\n## Core Features\n- Fully decentralized P2P mesh network\n- Max 5 neighbors per agent → tiny traffic footprint\n- Automatic self-healing topology\n- Operator = whoever has the cryptographic secret key\n- Commands signed with Ed25519 → no spoofing\n- End-to-end encrypted (Noise protocol)\n- GossipSub broadcast (fast \u0026 reliable)\n- Single binary, zero dependencies – works on Windows, Linux, macOS, ARM\n- NAT traversal \u0026 hole punching built-in\n- **`sgen`** — standalone agent generator (no Go toolchain required)\n\n## Architecture\n\n| Vector                         | Traditional C2 | SkoveNet                          |\n| ------------------------------ | -------------- | --------------------------------- |\n| Central server?                | Yes            | Never                             |\n| Killable by blocking 1 IP?     | Yes            | Impossible                        |\n| Operator has fixed location?   | Yes            | No – any node with the secret key |\n| Network dies when nodes drop?  | Yes            | No – self-healing graph           |\n| Command authenticity           | Server cert    | Ed25519-signed by secret key      |\n\n## Components\n\n| Binary         | Purpose                                              |\n| -------------- | ---------------------------------------------------- |\n| **agent**      | P2P node that joins the mesh and executes commands    |\n| **controller** | Operator CLI — connects to the local agent via IPC   |\n| **sgen**       | Standalone agent generator — no Go toolchain needed   |\n\n## Usage\n\n### Building\n\n```bash\n# Build sgen (the agent generator)\nmake sgen\n\n# Build the controller\nmake controller\n```\n\n### Generating Agents\n\n```bash\n# Generate a Linux agent (auto-creates a new keypair)\n./bin/sgen generate --os linux --arch amd64\n\n# Generate a Windows agent with an existing key\n./bin/sgen generate --os windows --arch amd64 --key \"base64pubkey...\"\n\n# Generate for macOS ARM (Apple Silicon)\n./bin/sgen generate --os darwin --arch arm64\n\n# List all supported platforms\n./bin/sgen list\n\n# Generate a keypair without building an agent\n./bin/sgen keygen\n```\n\n`sgen` is a self-contained binary that embeds a Go toolchain and the agent source code. It produces fully-configured agent binaries for any supported platform — no Go compiler or build tools required on the operator's machine.\n\n### Running\n\n```bash\n# Start the agent (on target machine)\n./agent\n\n# Connect with the controller (on operator machine)\n./controller\n\n# Inside the controller:\nsign \u003cprivate_key\u003e        # Authenticate as operator\npeers                     # List connected nodes\nuse \u003cpeerID\u003e              # Select a target node\nrun whoami                # Execute command on target\nradar                     # Scan for all network nodes\ngraph on                  # Open topology web viewer\n```\n\n## Engineering Challenge: NAT Traversal\nWhile SkoveNet's decentralized architecture eliminates the traditional Single Point of Failure (SPoF), operating within restricted corporate networks presents a significant hurdle. Standard P2P hole-punching often fails against **Symmetric NATs** and aggressive firewalls that block non-standard egress traffic.\n\nCurrently, the framework requires manual **Bootstrap/Relay nodes** (`connect` command) to maintain connectivity in these environments.\n\nWe are actively researching the integration of **STUN/TURN** protocols and **DNS-over-HTTPS (DoH)** tunneling to enhance NAT traversal and ensure resilient peer discovery without relying on static relay infrastructure.\n\n## Roadmap\n- **Traffic Evasion:** Implement pluggable transports (WebSockets, DNS, ICMP) to mask raw libp2p signatures.\n- **Obfuscation:** Integrate `garble` into sgen for compile-time obfuscation of generated agents.\n- **Dynamic Key Management:** Move from static Ed25519 to a rotating CA model or JWT-based session tokens.\n- **Feature Toggles:** Build-tag support in sgen for conditional compilation (`--tags stealth`).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fskoveit%2Fskovenet","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fskoveit%2Fskovenet","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fskoveit%2Fskovenet/lists"}