PoshC2

PoshC2 is pretty well documented, below are my notes. Best to use the official documentation: https://poshc2.readthedocs.io/en/latest/

Demo of PoshC2 is in this Red Team Village and Texas Cyber Summit June'gle event:

Install PoshC2

Configure and Run PoshC2

Modify the values in the file, consider: BindIP; PayloadCommsHost; UserAgent

Launch Server

On launch, PoshC2 generates a number of payloads into /opt/PoshC2_Project and creates a quick start file.

Launch Handler

Deploy Agent

Use the multitude of methods to deploy the agent from the quickstart.txt file.

Emulate TTPs

Run PowerShell Scripts

Chaining

Run the following command from the implant you want to use as the daisy server.

Download a file

Other Resources

Last updated

Was this helpful?