Back to Terminal

Rothackers C2

Advanced Multi-Platform Command & Control Framework designed for Security Operations, featuring Redis-backed communication and advanced communication protocols.

Project Status: Closed Source / Private PreviewThis project is currently in private development. Source code will be released in a future update.
View Documentation on GitHub

01. Infrastructure Visualization

The C2 architecture abandons traditional HTTP polling in favor of a Redis Pub/Sub model. This allows for asynchronous, bi-directional communication with millisecond latency.

  • Central Redis Server (Master)
  • Managed Nodes (Slaves)
  • Encrypted Data Packets
STATUS: ONLINE
NODES: 15 ACTIVE
PROTOCOL: REDIS PUB/SUB

Go-Based Agent

Native Windows binary compiled with Go. Uses direct syscalls to interact with user-mode hooks and EDR monitoring.

Gatekeeper Analysis

macOS implant that analyzes signed binaries to execute payloads without triggering Gatekeeper or XProtect.

Environment Awareness

Python payload generator that detects virtualized environments and modifies behavior to adapt to analysis environments.

02. Technical Deep Dive

The framework consists of three main components: the Team Server (Python/Redis), the Operator Client (GUI), and the Implants (Go/Python).

Key Capabilities

  • Process Injection: Inject payloads into legitimate processes like Notepad or Explorer.
  • Fileless Execution: Run scripts directly in memory without touching the disk.
  • Screen Surveillance: Real-time desktop streaming via WebSocket.
  • Input Monitoring: Low-level keyboard hooking for security auditing.