EternalHush Framework: new free advanced open-source c2 framework

by do son · September 17, 2023

EternalHush Framework

EternalHush Framework is a new open-source project that is an advanced C&C framework. Designed specifically for Windows operating systems, it allows users to easily extend its functionality by developing plugins in Python. This is achieved through its own Python API. The EternalHush Framework also features an intuitive and user-friendly interface that simplifies the process of controlling and collecting data from infected operating systems.

Features

API for Python plugins
Easy integration of external modules
Intuitive GUI
Automatic build script

Interaction with implant

Configuring implant

EternalHushFramework provides a modular ClingySpider implant to infect and control Windows OS. To get the configured binary (.exe or .dll) it is necessary to run the clsp_prepare configurator.

As a result, you will have an implant that is ready to work.

(Note: RSA keypair can be generated manually using keygen <path_to_save> command, which will generate and save private.key and public.key).

Connection to implant

To connect to an implant and make modules execute in its context you can do this in two ways.

Method 1

You can open a connection using the console command clsp_connect <host> <port> <path_to_private_key>. This command will open a new connection to the implant, perform a basic authentication process, and export this connection as a global connection for this console. This means that now all modules that want to access the implant must use this configured connection.