C2 Cloud: robust web-based C2 framework

by do son · April 5, 2024

C2 Cloud

The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly interface.

Adversaries often use covert communication methods to conceal activities, making it challenging for security systems to detect and mitigate threats. Sophisticated monitoring, anomaly detection, and behavior analysis are required to mitigate these threats.

The C2 Cloud is an open-source platform with a user-friendly web interface that allows security professionals to conduct red teaming exercises efficiently.

Reverse shells support:

Reverse TCP
Reverse HTTP
Reverse HTTPS (configure it behind an LB)

Key Features

🔒 Anywhere Access: Reach the C2 Cloud from any location.
🔄 Multiple Backdoor Sessions: Manage and support multiple sessions effortlessly.
🖱️ One-Click Backdoor Access: Seamlessly navigate to backdoors with a simple click.
📜 Session History Maintenance: Track and retain complete command and response history for comprehensive analysis.

Tech Stack

🛠️ Flask: Serving web and API traffic, facilitating reverse HTTP(s) requests.
🔗 TCP Socket: Serving reverse TCP requests for enhanced functionality.
🌐 Nginx: Effortlessly routing traffic between web and backend systems.
📨 Redis PubSub: Serving as a robust message broker for seamless communication.
🚀 Websockets: Delivering real-time updates to browser clients for enhanced user experience.
💾 Postgres DB: Ensuring persistent storage for seamless continuity.