https://github.com/maxdcb/c2teamserver

TeamServer and Client of Exploration Command and Control Framework
https://github.com/maxdcb/c2teamserver

c2 commandandcontrol cybersecurity readteam

Last synced: 3 days ago
JSON representation

TeamServer and Client of Exploration Command and Control Framework

• Host: GitHub
• URL: https://github.com/maxdcb/c2teamserver
• Owner: maxDcb
• License: mit
• Created: 2023-04-26T13:34:02.000Z (almost 2 years ago)
• Default Branch: master
• Last Pushed: 2025-01-28T14:09:30.000Z (11 days ago)
• Last Synced: 2025-01-29T13:52:18.680Z (10 days ago)
• Topics: c2, commandandcontrol, cybersecurity, readteam
• Language: Python
• Homepage:
• Size: 36.3 MB
• Stars: 83
• Watchers: 3
• Forks: 14
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Exploration C2 Framework







## What it is

Exploration is a red team Command and Control (C2) framework.  

This repository includes both the TeamServer and the Client.  

The release package contains the TeamServer, the Client, as well as the beacons and modules for Windows from [C2Implant](https://github.com/maxDcb/C2Implant) and for Linux from [C2Implant](https://github.com/maxDcb/C2LinuxImplant).

You can run the following command to retrieve the latest release:

```

wget -q $(wget -q -O - 'https://api.github.com/repos/maxDcb/C2TeamServer/releases/latest' | jq -r '.assets[] | select(.name=="Release.tar.gz").browser_download_url') -O ./C2TeamServer.tar.gz

mkdir C2TeamServer && tar xf C2TeamServer.tar.gz -C C2TeamServer --strip-components 1

```

## Introduction

The TeamServer is a standalone application, coded in C++, that handles listeners. The Client, coded in Python, communicates with the TeamServer through gRPC.  

Beacons run on the victim host. Each Beacon that connects back to the TeamServer opens a new session. This session is used to control the Beacon, send commands, and receive results.  

Listeners and Beacons can communicate through TCP, SMB, HTTP, HTTPS.  

![alt text](https://github.com/maxDcb/C2TeamServer/blob/master/images/ListenersAndSessions.png?raw=true)

![alt text](https://github.com/maxDcb/C2TeamServer/blob/master/images/ListenersAndSessions2.png?raw=true)

A compiled version of the TeamServer is available in the Releases, complete with default certificates for gRPC communication and HTTP Listener.

The TeamServer binary is in Release/TeamServer. It can be launched using the following command:

```

./TeamServer

```

![alt text](https://github.com/maxDcb/C2TeamServer/blob/master/images/TeamServerLaunch.png?raw=true)

The Python Client is located in Release/Client. It can be launched using the following command:

```

cd  Release/Client 

# --dev is to specify that the GRPC hostname in the SSL certificat will not be checked

# --ip is the ip of the TeamServer

python3 GUI.py --ip 127.0.0.0 --port 50051 --dev

```

The following packages are required to run the Client:

```

pip3 install pycryptodome

pip3 install grpcio==1.66.1

pip3 install PyQt5

pip3 install pyqtdarktheme

pip3 install protobuf==5.27.0

```

## Wiki

For more information, please visit the [wiki](https://github.com/maxDcb/C2TeamServer/wiki)