Kali Linux

Tetanus : Mythic C2 Agent Targeting Linux And Windows Hosts Written In Rust

Tetanus is a Windows and Linux C2 agent written in rust.

Installation

To install Tetanus, you will need Mythic set up on a machine.

In the Mythic root directory, use mythic-cli to install the agent.

sudo ./mythic-cli install github https://github.com/MythicAgents/tetanus
sudo ./mythic-cli payload start tetanus

Tetanus supports the http C2 profile:

sudo ./mythic-cli install github https://github.com/MythicC2Profiles/http
sudo ./mythic-cli c2 start http

Features

  • Background job management
  • Built-in ssh client
    • Connect to a machine and download/upload files between that machine and Mythic
    • Get directory listings from machines using sftp
    • Spawn agents on machines using ssh
    • ssh-agent hijacking
  • Streaming portscan
  • Stand up TCP redirectors

Future Additions

  • v0.2.0
    • Socks proxying
    • Windows token manipulation
    • More browser script integration
    • DNS C2 profile
    • p2p capabilities
    • In memory shellcode execution execute-shellcode

General Commands

CommandSyntaxDescription
catcat [file]Output the contents of a file.
cdcd [new directory]Change directory.
cpcp [source] [destination]Copy a file from [source] to [destination].
downloaddownload [path]Download a file from the target system (supports relative paths).
exitexitExit the agent.
getenvgetenvGet the current environment variables.
getprivsgetprivsGet the privileges of the agent session.
jobkilljobkill [job id]Shutdown a running background job.
jobsjobsList currently running background jobs.
lsls [directory]List files or directories (supports relative paths).
mkdirmkdir [directory]Make a new directory.
mvmv [source] [destination]Move a file from [source] to [destination] (supports relative paths).
portscanportscan [popup]Scan a list of IPs for open ports.
pspsGet a list of currently running processes.
pwdpwdPrint working directory.
redirectredirect [<bindhost>:<bindport>:<connecthost>:<connectport>]Setup a TCP redirector on the remote system.
rmrm [path]Remove a file or directory (supports relative paths).
setenvsetenv [name] [value]Set environment variable [name] to [value].
shellshell [command]Run a shell command with bash -c on Linux or cmd.exe /c on Windows in a new thread.
sleepsleep [interval][units] [jitter]Set the sleep interval and jitter (supports unit suffixing).
sshssh [popup]Use ssh to execute commands, download/upload files or grab directory listings.
ssh-agentssh-agent [-c <socket>] [-d] [-l]Connect to running ssh agent sockets on the host or list identities.
ssh-spawnssh-spawn [popup]Spawn a Mythic agent on a remote host using ssh.
unsetenvunsetenv [var]Unset an environment variable.
uploadupload [popup]Upload a file to the host machine.

Windows-specific Commands

CommandSyntaxDescription
powershellpowershell [command]Run a command using powershell.exe /c in a new thread.
R K

Recent Posts

Kali Linux 2024.4 Released, What’s New?

Kali Linux 2024.4, the final release of 2024, brings a wide range of updates and…

12 hours ago

Lifetime-Amsi-EtwPatch : Disabling PowerShell’s AMSI And ETW Protections

This Go program applies a lifetime patch to PowerShell to disable ETW (Event Tracing for…

12 hours ago

GPOHunter – Active Directory Group Policy Security Analyzer

GPOHunter is a comprehensive tool designed to analyze and identify security misconfigurations in Active Directory…

2 days ago

2024 MITRE ATT&CK Evaluation Results – Cynet Became a Leader With 100% Detection & Protection

Across small-to-medium enterprises (SMEs) and managed service providers (MSPs), the top priority for cybersecurity leaders…

5 days ago

SecHub : Streamlining Security Across Software Development Lifecycles

The free and open-source security platform SecHub, provides a central API to test software with…

1 week ago

Hawker : The Comprehensive OSINT Toolkit For Cybersecurity Professionals

Don't worry if there are any bugs in the tool, we will try to fix…

1 week ago