Minimalist C2 server for educational purpose.

• Encrypted reverse shell
  • With cd support
• Port scanner
  • Single host and network scan
  • Banner grabbing
• DNS ex-filtration
  • Used for download/upload
• Persistence
  • Linux :
    • Systemd service -> every 3 seconds
    • Crontab -> every minute
  • Windows :
    • Scheduled task -> every minute

• Multi-session
  • Metasploit-like
• Upload/download files
  • Using DNS ex-filtration
• Cross-platform
• No external modules in payload (no need to pip install something)

With pip:

pip install git+https://github.com/gelven4sec/nanosploit.git

Run the program terminal :

python -m nanosploit

Export a payload to execute on victim :

python -m nanosploit generate --path payload --host 127.0.0.1 --port 5353
./payload # Execute on remote machine

Run the program for debugging :

python -m nanosploit client