onenutw0nder / cattails Goto Github PK

Currently, packet data is not encrypted leaving bot and c2 communication in plaintext. This needs to be encrypted to make the traffic harder to identify as c2 traffic.

Encryption: AES

Currently we can only target ALL bots or a single bot. Add features to allows targeting the same machines across all teams. Example, target all web server machines on teams 1-10.

Possible performance issues with a bot count of 90+.

More testing needed

The server will say that it sent the targeted command to the target box whenever ANY bot calls back, not just the targeted box. This leaves the user in a state of uncertainty about whether or not the target box has gotten the command or not.

Bot and server will segfault if they receive UDP traffic that is not CatTalis specific traffic. Example, if you put the server and bot on port 53 they will segfault anytime they pick up a DNS packet because it is not CatTails traffic. This issue lies in the parsing of packets in cattails.go