base on 渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理 <p align="center"> <img src="https://badgen.net/github/stars/INotGreen/XiebroC2/?icon=github&color=black"> <a href="https://github.com/INotGreen/XiebroC2/releases"><img src="https://img.shields.io/github/downloads/INotGreen/XiebroC2/total?color=blueviolet"></a> <img src="https://badgen.net/github/issues/INotGreen/XiebroC2"> <a href="https://github.com/INotGreen/XiebroC2/wiki" style="text-decoration:none;"> <img src="https://img.shields.io/badge/%E6%96%87%E5%BA%93-wiki-yellow"> </a> </p> > **Note**: For the English version of this documentation [README in English](README_EN.md). ## 主要功能 - 植入端（Implant）使用Golang编写，兼容Windows、Linux、MacOS（移动平台正在考虑未来更新） - 团队服务器（Teamserver）使用.net 6.0编写，不依赖.NET Core环境运行 - 控制器（Controller）支持反向shell，文件管理，进程管理，网络流量监控，内存加载，反向代理（基于[IOX](https://github.com/EddieIvan01/iox）模型))、屏幕截图、进程注入和迁移。检测AV/EDR进程，内联powershell命令 - 支持在Windows / Linux上内存中加载PE文件，支持进程注入和迁移，允许文件不接触磁盘的情况下进行加载 - 支持内存中执行.net程序集（execute-assembly，inline-assembly） - 支持通过 lua 脚本扩展命令中心以及菜单栏（这一点和cna脚本类似） - 自定义 RDI shellcode 支持（仅限 64 位，32 位需要手动客户端编译）或使用 [donut](https://github.com/TheWover/donut)、[Godonut](https://github.com/Binject/go-donut) 生成自己的 shellcode - 通过修改profile.json中的Chat ID、API Token参数来设置Telegram 主机上线通知 ## 支持的平台 **Implant(Session)** - Windows ：win7-win11，windows server2008-2022 - Linux：支持 glibc 2.17以上 的，Ubuntu、Debian、CentOS等系统 - MacOS: 10.15以上 为了考虑到兼容性，这里选择了Go 1.20进行编译 值得注意的是Go 1.20以上已经不支持win7、windows Server2008和一些古老的Linux系统了，并且XiebroC2中的payload目前只支持x64位的架构，如果你想上线更古老的系统，需要自行编译源码，并且将Go的版本降低到1.19-1.16以下 **Teamserver** - Windows ：win8-win11，windows server2012-2022 - Linux：支持 glibc 2.17以上 的系统 ## 如何使用 直接使用二进制文件：[Release](https://github.com/INotGreen/XiebroC2/releases) 使用说明: [xiebroC2 Wiki](https://github.com/INotGreen/XiebroC2/wiki) 将外部的渗透测试工具扩展成Lua插件：[Xiebro-Plugins](https://github.com/INotGreen/Xiebro-Plugins) ## 网络拓扑 通过可视化拓扑图查看网络流量分布  ## 视频演示 [demo](https://private-user-images.githubusercontent.com/89376703/305162512-771c2e88-afd8-493d-a575-7e10149837dd.mp4) ## TODO - 考虑开发Powershell、VBscript、Hta、Jscript等payload。 - 开放更多表单和API接口，方便Lua扩展插件。 ## Star History [](https://star-history.com/#INotGreen/XiebroC2&Date) ## 免责声明 本项目仅用于渗透测试练习中的教育和研究目的，目前处于测试阶段。禁止将其用于任何非法活动（包括黑市交易、未经授权的渗透攻击）！互联网不是法外之地！如果您选择使用此工具，则必须遵守上述要求。 为了防止该工具被犯罪分子利用，我删除了最有害的功能，只留下一些功能作为渗透测试演练演示。Teamserver 和 Controller 不开源。 ", Assign "at most 3 tags" to the expected json: {"id":"7956","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"