-
Notifications
You must be signed in to change notification settings - Fork 6
Home
HeadHunter is an adversary emulation framework and command & control (C2) server with encrypted communications along with a bundled agent generator with cross compilation capabilities. HeadHunter has functionality to generate binary and shellcode agents for GNU/Linux and Windows 32- and 64-bit operating systems.
A Hunter agent will call back to the HeadHunter command and control infrastructure, requesting agent commands from the operator until provided. If no commands are provided, the agent will sleep and continuously beacon until the agent is provided with instructions.
HeadHunter is far from finished, and while it has base functionality, with Agent session switching, encrypted communications, and Agent generation options, I have big plans for this project.
Some of the features that I would like to implement are:
-
Unique keys as UUID's for Agent communication - This will be useful for avoiding a single point of failure for the C2 infrastructure. Each Agent will have a different key injected at compile time, and the server will hold an array of secret keys for each individual session.
-
Allow authentication and teamplay from the C2 infrastructure - Allowing multiple operators to access Agent sessions individual of each other using a secure authentication implementation.
-
Major agent features and staging - This will include a stager that will act as a delivery system for a shellcode payload distributed from the HeadHunter server, as well as persistence options for the agent