goc2

c2 client/server/paylod

GoC2 - MacOS Post Exploitation C2 Framework

Custom C2 for bypassing EDR and ease of use.

Status

• This is still an active work in progress (Not ready for production use)

Features

•  Terraform deployment
•  Command History
•  Remote Command Completion (yes this works!)
•  JXA execution (cocoa api)
•  Clipboard (cocoa api)
•  cat / curl (cocoa api)
•  add Doom persistence list
•  Add Slack integration
•  Add ++ persistence
•  Add + privesc

Prereqs (must be in path)

• install mongodb on c2 server ** sudo apt install mongodb * required

Getting Started (C2 Server)

• go get github.com/goc2
• sudo apt install mongodb || brew install mongodb
• ./goc2 --web

CLI

• ./goc2 --cli --c2 http://c2.server