NetAtlas C2 Server Search: detect Command and Control (C2) servers
NetAtlas C2 Server Search
C2 Search Netlas is a Java utility designed to detect Command and Control (C2) servers using the Netlas API. It provides a straightforward and user-friendly CLI interface for searching C2 servers, leveraging the Netlas API to gather data and process it locally.
Support
Name | Support |
---|---|
Metasploit | ✅ |
Havoc | ❓ |
Cobalt Strike | ✅ |
Bruteratel | ✅ |
Sliver | ✅ |
DeimosC2 | ✅ |
PhoenixC2 | ✅ |
Empire | ❌ |
Merlin | ❌ |
Covenant | ❌ |
Villain | ✅ |
Shad0w | ❌ |
PoshC2 | ❌ |
Legend:
- ✅ – Accept/good support
- ❓ – Support unknown/unclear
- ❌ – No support/poor support
Install
To download a release of the utility, follow these steps:
- Visit the repository’s releases page on GitHub.
- Download the latest release file (typically a JAR file) to your local machine.
- In a terminal, navigate to the directory containing the JAR file.
- Execute the following command to initiate the utility: java -jar c2-search-netlas-<version>.jar -t <ip-or-domain> -p <port> -s <your-netlas-api-key>
Use
o utilize this terminal utility, you’ll need a Netlas API key. Obtain your key from the Netlas website.
After acquiring your API key, execute the following command to search servers:
Replace <TARGET_DOMAIN> with the desired IP address or domain, <TARGET_PORT> with the port, you wish to scan, and <API_KEY> with your Netlas API key. Use the optional -v flag for verbose output. For example, to search at the google.com IP address on port 443 using the Netlas API key 1234567890abcdef, enter: java -jar c2-search-netlas-<version>.jar -t <ip-or-domain> -p <port> -s <your-netlas-api-key>
Copyright (C) 2023 michael2to3
Source: https://github.com/michael2to3/