PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements.
PickleC2 has the ability to import your own PowerShell module for Post-Exploitation and Lateral Movement or automate the process.
There is a one implant for the beta version which is powershell.
- PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP.
- PickleC2 can handle multiple listeners and implants with no issues
- PickleC2 supports anyone who would like to add his own PowerShell Module
In the up coming updates pickle will support:
- Go Implant
- Powershell-Less Implant that don’t use System.Management.Automation.dll.
- Malleable C2 Profile will be supported.
- HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted.
PickleC2 is a opensource can be found on Github. PickleC2 is only supported for linux for now and you can download it through https://github.com/xRET2pwn/PickleC2
Installation and Setup
PickleC2 is written in Python3 and developed and tested on Kali Linux.
Install PickleC2 On Linux
Picklec2 is can be found on Github.
git clone https://github.com/xRET2pwn/PickleC2.git
Install Python3 and pip3
sudo apt install python3 python3-pip
Install PickleC2 requirements
python3 -m pip install -r requirements.txt
How To Use PickleC2
PickleC2 is so simple and easy to use and everything you need will be found in help option
How to help
The help command will show you everything you need and help can be used to show any option’s help through
How to Listener
You can use
help listener command to show all the listener commands.
Listeners is built on flask.
FLASK is a popular Python web framework, meaning it is a third-party Python library used for developing web applications.
You can start your listener through
listener start [Listener_Name] [Listener_Interface] [Listener_Port]
You can stop your listener through
listener stop [Listener_Name]
You can list all the listeners through
You can use load listener if you have a not active listeners and you need to active them.
How to Implant
In this section you will be able to create your implant.
You can generate implant through.
implant generate [listener_name] [Implant_Lang] [Implant_Name]
List Active Implant
You can list all the active implant through
How to Interact
After receiving the implant shell you can interact with it through
After entering the interact section you can use help command to show the interact commands.
There is an option to execute a PowerShell Command through
There is an option to execute a CMD command through
There is an options to invoke a PowerShell script through
There is an option to set a delay time through
There is an option to end the implant activity through
PickleC2 supports to anyone who would like to add his own powershell script to invoke in his target through adding his powershell module in the modules folder and add his module in the database.
Add PowerShell Module
For anyone who would like to add his powershell module must follow the following steps:
- Run AddModule.py script.
- Add the powershell module in modules Folder.
PickleC2 is so simple to use all you need to do to use a module is
- interact <Target_Name>
- module <Module_Name>