A Backdoor program which acts as a simple Command and Control (C2) server as well as client, transmitting and receiving data through encrypted covert channels of the SSL and TLS over the HTTP protocol.
The program uses HTTP Cookies as its heart, through which it transmits Base64 encoded commands and receives its output.
- Create Self-Signed Certificates using OpenSSL
mkdir auth
openssl req -new -x509 -newkey rsa:4096 -nodes -keyout auth/key.pem -out auth/cert.pem -days 10000- Run the HTTPS Server
python3 https.py 2>/dev/null- Run the client on the victim side
python3 client.pyThe server and client listening and connecting addresses are hardcoded in the source files. In order to make most of these programs, please consider to change them according to your desired needs.
This project is intended for educational and security testing purposes only. The author is not responsible for any misuse of this tool.
Developed by Sayan Ray @BareBones90
This project is licensed under the MIT License - see the LICENSE file for details.