infosecn1nja
/
PoshC2_Python
mirror of https://github.com/infosecn1nja/PoshC2_Python.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Python Server for PoshC2
233 Commits
4 Branches
7 Tags
12 MiB
PowerShell 97.7%
Python 2.1%
C# 0.2%
 
 
 
Go to file
m0rv4i 72172ba83c Add config option LogUsers, false by default but it set to true will prompt for a username (or can pass one to ImplantHandler with -u <name> or --u <name>). Tasks run by that user will then be logged as that user. 2019-02-11 17:05:14 +00:00
Files * Refactor tasks to insert on run and update on complete 2019-02-11 14:44:57 +00:00
Images Initial Commit 2018-07-23 09:55:15 +01:00
Modules * Refactor tasks to insert on run and update on complete 2019-02-11 14:44:57 +00:00
.gitignore Added ability to load and execute LinuxPrivChecker in memory on *nix implants. 2019-01-13 16:16:09 +00:00
Alias.py v4.7 - fixes and updates 2019-02-03 19:50:40 +00:00
AutoLoads.py Add config option LogUsers, false by default but it set to true will prompt for a username (or can pass one to ImplantHandler with -u <name> or --u <name>). Tasks run by that user will then be logged as that user. 2019-02-11 17:05:14 +00:00
C2Server.py * Refactor tasks to insert on run and update on complete 2019-02-11 14:44:57 +00:00
C2Viewer.py * Refactor tasks to insert on run and update on complete 2019-02-11 14:44:57 +00:00
Cert.py Initial Commit 2018-07-23 09:55:15 +01:00
Colours.py Initial Commit 2018-07-23 09:55:15 +01:00
Config.py Add config option LogUsers, false by default but it set to true will prompt for a username (or can pass one to ImplantHandler with -u <name> or --u <name>). Tasks run by that user will then be logged as that user. 2019-02-11 17:05:14 +00:00
CookieDecrypter.py Cookie Decryter 2019-01-02 21:10:01 +00:00
Core.py Added CSharp Implant/Dll/Shellcode - More functionality coming soon 2018-12-27 12:10:46 +00:00
DB.py Add config option LogUsers, false by default but it set to true will prompt for a username (or can pass one to ImplantHandler with -u <name> or --u <name>). Tasks run by that user will then be logged as that user. 2019-02-11 17:05:14 +00:00
HTML.py * Refactor tasks to insert on run and update on complete 2019-02-11 14:44:57 +00:00
Help.py v4.7 - fixes and updates 2019-02-03 19:50:40 +00:00
INSTALL.txt Updated INSTALL notes 2018-12-02 01:15:02 +00:00
INSTALL_Socks.txt Initial Commit 2018-07-23 09:55:15 +01:00
INSTALL_Windows.txt Initial Commit 2018-07-23 09:55:15 +01:00
Implant.py Add config option LogUsers, false by default but it set to true will prompt for a username (or can pass one to ImplantHandler with -u <name> or --u <name>). Tasks run by that user will then be logged as that user. 2019-02-11 17:05:14 +00:00
ImplantHandler.py Add config option LogUsers, false by default but it set to true will prompt for a username (or can pass one to ImplantHandler with -u <name> or --u <name>). Tasks run by that user will then be logged as that user. 2019-02-11 17:05:14 +00:00
Install.sh Updated to fix TLS 1.0 issues. Server now supports TLSv1 and above. Powershell v2 Get-WebClient requires anything below TLSv1.2 2019-01-09 22:27:44 +00:00
LICENSE Initial Commit 2018-07-23 09:55:15 +01:00
OfflineReportGenerator.py * Refactor tasks to insert on run and update on complete 2019-02-11 14:44:57 +00:00
Opsec.py v4.7 - fixes and updates 2019-02-03 19:50:40 +00:00
Payloads.py Consistently display usernames and domains across logs and fix CreateRawBase to use the core (fixing get-system and the gzip payload etc). 2019-02-06 22:29:11 +00:00
README.md Updated README 2018-12-12 16:23:57 +00:00
TabComplete.py Initial Commit 2018-07-23 09:55:15 +01:00
Tasks.py Add config option LogUsers, false by default but it set to true will prompt for a username (or can pass one to ImplantHandler with -u <name> or --u <name>). Tasks run by that user will then be logged as that user. 2019-02-11 17:05:14 +00:00
Update.sh Removed all versioning references 2018-12-31 18:01:08 +00:00
UrlConfig.py Adding files to enable custom URL generation. 2018-12-14 01:39:24 +00:00
changelog.txt v4.7 - fixes and updates 2019-02-03 19:50:40 +00:00
oldurls.txt Adding files to enable custom URL generation. 2018-12-14 01:39:24 +00:00
poshc2.service Initial Commit 2018-07-23 09:55:15 +01:00
requirements.txt Initial Commit 2018-07-23 09:55:15 +01:00
wordlist.txt Adding files to enable custom URL generation. 2018-12-14 01:39:24 +00:00

README.md

PoshC2

PoshC2 is a proxy aware C2 framework that utilises Powershell and/or equivalent (System.Management.Automation.dll) to aid penetration testers with red teaming, post-exploitation and lateral movement. Powershell was chosen as the base implant language as it provides all of the functionality and rich features without needing to introduce multiple third party libraries to the framework.

In addition to the Powershell implant, PoshC2 also has a basic dropper written purely in Python that can be used for command and control over Unix based systems such as Mac OS or Ubuntu.

The server-side component is written in Python for cross-platform portability and speed, a Powershell server component still exists and can be installed using the 'Windows Install' as shown below but will not be maintained with future updates and releases.

Linux Install of PoshC2_Python

Install using curl & bash

curl -sSL https://raw.githubusercontent.com/nettitude/PoshC2_Python/master/Install.sh | bash

Manual install

wget https://raw.githubusercontent.com/nettitude/PoshC2_Python/master/Install.sh
chmod +x ./Install.sh
./Install.sh

Windows Install of PoshC2

powershell -exec bypass -c "IEX (New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/nettitude/PoshC2/master/C2-Installer.ps1')"

Issues / FAQs

If you are experiencing any issues during the installation or use of PoshC2 please refer checkout the open issues tracking page within GitHub. If this page doesn't have what you're looking for please open a new issue and we will try to resolve the issue asap.

If you are looking for tips and tricks on PoshC2 usage and optimisation, you are welcome to join the slack channel below.

License / Terms of Use

This software should only be used for authorised testing activity and not for malicious use.

By downloading this software you are accepting the terms of use and the licensing agreement.

Documentation

We maintain PoshC2 documentation over at https://poshc2.readthedocs.io/en/latest/

Find us on #Slack - poshc2.slack.com (to request an invite send an email to labs@nettitude.com)