REC2 : Rusty External Command And Control Tool

REC2, short for Rusty External Command and Control, is a sophisticated Command and Control (C2) framework developed in the Rust programming language.

Designed for advanced operational use, REC2 enables remote management of implants (clients) across macOS, Linux, and Windows platforms.

This tool leverages external APIs like VirusTotal and Mastodon to transmit encrypted communications, ensuring stealth and anonymity during operations.

Key Features

1. Cross-Platform Support: REC2 supports Windows, Linux, and macOS systems, making it highly versatile.
2. Encrypted Communication: It uses AES encryption for secure data exchange between the server and implants.
3. External API Integration: By utilizing APIs like VirusTotal or Mastodon as intermediaries, REC2 minimizes traceability, adding a layer of anonymization.
4. Stealth Operations: Implants monitor pending jobs, decrypt tasks, execute them on the target system, and securely transmit results back via external APIs.
5. Modular Design: The tool can be compiled using Makefile or Dockerfile for various environments.

To use REC2 effectively:

• Modify implant configuration files (main.rs) with appropriate API tokens and URLs from VirusTotal or Mastodon.
• Compile implants using commands such as make virustotal_windows or make mastodon_linux.
• Build the server binary with make c2server_release and execute commands to manage implants remotely.

For example:

bash./server_release VirusTotal --url <URL> --token <TOKEN> --key <AES_KEY>

This command initiates communication with implants via VirusTotal.

REC2 offers flexible compilation methods:

• Using Makefile: Supports various architectures (e.g., x64, ARM) across Windows, Linux, and macOS.
• Using Dockerfile: Ensures all dependencies are met for seamless builds within containerized environments.

REC2 continues to evolve with planned features like asynchronous job status checks, enhanced session management commands, and potential integration with additional social networks like SoundCloud.

REC2 is strictly for educational purposes. Unauthorized use of this tool is illegal. Users are responsible for complying with all applicable laws.

For more information and access to the repository, visit GitHub under the username D1rkMtr.