Mythic C2

contents

mythic.md

Summary#

Installation
Agents
Profiles
References

Installation#

sudo apt-get install build-essentialgit clone https://github.com/its-a-feature/Mythic --depth 1./install_docker_ubuntu.sh./install_docker_debian.shcd Mythicsudo makesudo ./mythic-cli start

Agents#

Mythic Community Agent Feature Matrix

Agents can be found at: https://github.com/MythicAgents

./mythic-cli install github https://github.com/MythicAgents/Medusa # A Mythic Agent compatible Python 2.7 and 3.8./mythic-cli install github https://github.com/MythicAgents/Hannibal # A Mythic Agent written in PIC C./mythic-cli install github https://github.com/MythicAgents/thanatos # A Mythic C2 agent targeting Linux and Windows hosts written in Rust./mythic-cli install github https://github.com/MythicAgents/poseidon # A Mythic Agent written in Golang for Linux/MacOS./mythic-cli install github https://github.com/MythicAgents/Apollo # # A Mythic Agent written in C# using the 4.0 .NET Framework ./mythic-cli install github https://github.com/MythicAgents/Athena # A Mythic Agent written in .NET./mythic-cli install github https://github.com/MythicAgents/Xenon # A Mythic Agent written in C, compatible with httpx profiles

Profiles#

C2 Profiles can be found at: https://github.com/MythicC2Profiles

./mythic-cli install github https://github.com/MythicC2Profiles/httpx./mythic-cli install github https://github.com/MythicC2Profiles/http./mythic-cli install github https://github.com/MythicC2Profiles/websocket./mythic-cli install github https://github.com/MythicC2Profiles/dns./mythic-cli install github https://github.com/MythicC2Profiles/dynamichttp./mythic-cli install github https://github.com/MythicC2Profiles/smb./mythic-cli install github https://github.com/MythicC2Profiles/tcp

SSL#

If you want to use SSL, put your key and cert in the C2_Profiles/HTTP/c2_code folder and update the key_path and cert_path variables to have the names of those files.

Use Let’s Encrypt certbot to get both the key and certificate for your domain:

sudo apt install certbotcertbot certonly --standalone -d "example.com" --register-unsafely-without-email --non-interactive --agree-tos

Add the file in the Agent container:

docker cp /etc/letsencrypt/archive/example.com/fullchain1.pem http:/Mythic/http/c2_code/fullchain.pemdocker cp /etc/letsencrypt/archive/example.com/privkey1.pem http:/Mythic/http/c2_code/privkey.pem

Alternatively, if you specify use_ssl as true and you don’t have any certs already placed on disk, then the profile will automatically generate some self-signed certs for you to use.

References#

Mythic Documentation