Rust C2 Framework

The Rust C2 Framework is a modernized, secure, and high-performance Command and Control (C2) solution designed for remote system management and penetration testing. This framework has been extensively rebuilt using Rust, offering a modular and efficient platform that includes independent clients, a server, and an intuitive web management interface.

Core Features

• Linux Platform Support: The client is specifically designed for Linux, while the server supports both Windows and Linux operating systems.
• End-to-End Encrypted Communication: Implements AES-256-GCM encryption to ensure the confidentiality and integrity of communication data.
• Modern Web Management Interface: Built using the Axum web framework and Askama template engine, it provides a responsive and user-friendly experience.
• High-Performance Asynchronous Architecture: Utilizes the Tokio runtime for efficient concurrent processing and low-latency communications.
• Flexible Configuration Management: Easily adjust parameters via a TOML configuration file without the need for recompilation.

Advanced Features

• Real-Time Command Execution: Execute system commands remotely and instantly receive execution results with encryption support.
• Interactive Reverse Shell: Offers a stable reverse shell session for in-depth interaction with controlled hosts.
• Complete File Management: Facilitates browsing, uploading, downloading, and deleting files, while supporting large file chunk transfers.
• Real-Time Client Monitoring: Displays detailed information about connected clients, their activity status, and system information.
• Audit Log System: Records all operational activities with support for log categorization and real-time viewing.
• Note Management: Provides an integrated note system for documenting the penetration testing process and findings.

Security Features

• On-Demand Listener Startup: Reverse shell listeners are only activated when needed, minimizing the attack surface.
• User Authentication: Ensures secure authentication and session management within the web interface.
• Operational Auditing: Maintains a complete operation audit trail for security compliance.
• Process Hiding: Employs client process hiding techniques to enhance security.
• Anti-Reverse Engineering: Includes code obfuscation and anti-debugging measures.
• Sandbox Evasion: Detects and avoids sandbox environments for enhanced stealth.

Project Structure

The project is organized using Cargo workspaces, ensuring clear structure and defined module responsibilities:

rust-c2-framework/
├── Cargo.toml                    # Workspace configuration file
├── server_config.toml            # Server configuration file
├── common/          # Shared libraries (protocols, encryption, configuration)
├── server/          # Server (Web interface, API, client management)
├── client/          # Clients (command execution, file operation, reverse shell)
└── web/static/      # Frontend resources (CSS, JS, images)

Disclaimer

Important Reminder: This project is intended solely for educational and research purposes. It should not be used for any illegal or malicious activities. Users bear full responsibility for any actions taken while using this software.

Legal Use Declaration:

• Educational and training purposes in cybersecurity
• Authorized penetration testing
• Red team exercises in compliant environments

Ensure compliance with local laws and obtain explicit authorization from the system owner before utilizing the framework.