Discord C2 for Redteam engagement....Need a better name. If you can think of one, please tell me. :)
During Blue-Red Team competition, I needed an easy and fast way to keep connected and a way for mutiple redteamer to run commands, hence DiscordGo. Since Discord is getting popular, why not use the platorm as a c2. That's what this project is about.
To use DiscordGo, you need to create a Discord bot and a Discord server. After that, invite the bot to your server.
Click here to learn how to create a server and here to create a bot. And finally, learn to invite the bot to your server with this.
When creating the bot, you need it give it some permission. For testing, I gave the bot full administrative permission. But the required permission are as follow:
- Send Messages
- Read Messages
- Attach Files
- Manage Server
Edit this file pkg/util/constants/variables.go with your token and ID. Or create it if not there
The bot token can be found on discord developer dashboard where you created the bot. To get your server ID, go to your server setting and click on widget. On the right pane, you see the your ID.
An example configuration file looks like this:
var ServerID = "XXXXXXXXXXXX"
var BotToken = "XXXXXXXXXXX"
After that is done, all you have to do is run make. That will create 5 binaries.
* d2Server --> MacOS Server binary(tested on Big Sur)
* lind2Server --> Linux Server binary(should work on most linux distro)
* linux-agent
* windows-agent.exe
* macos-agent
- Cross-platform
- Organozer(talk about and intergration to pwnboard)
- Cross-platform
- File upload
- File download
- Agent grouping(by hostname like web hosts and so on, slash command)
- Group commands
- Integrate with pwndrop
The author is in no way responsible for any illegal use of this software. It is provided purely as an educational proof of concept. I am also not responsible for any damages or mishaps that may happen in the course of using this software. Use at your own risk.
Every message on discord are saved on Discord's server, so be careful and not upload any sensitive or confidential documents.
Inspired by SierrOne