Serverless C2 is a completely serverless command and control platform utilizing the AWS cloud. It gives pentesters, CTF players, and potentially even red teamers a cheap C2 platform designed with antivirus evasion in mind by limiting the amount of red flags that security products and the blue team might see. The Serverless C2 implants are designed to be lightweight and a good choice for your first shell on the box. Another added benefit of using the AWS ecosystem is that instead of calling out to custom domains or IP addressess, the implants simply call out to AWS API Gateway URLs, making it harder for tools to distinguish the HTTPS traffic from normal HTTPS traffic. The Serverless C2 can be quickly deployed in your AWS cloud and will provide you a serverless team "server" where you can create payloads, manage implants, and invite team members all from the comfort of your own browser.
Installation - (get up and running in under 5 minutes)
- Python Implant
- PowerShell Dotnet Reflection
- C-Sharp Implant
- PE Reflection
- Drag-and-drop public file hosting
- Ability to archive/delete implants (dashboard.html)
- Increased Metadata displayed for implants (implant.html)
- Ability to create new listeners