Skip to content
KONDORDEVSECURITYCORPPublic

About

Post-exploitation C2 framework for security research

Resources

Stars

1 star

Watchers

0 watching

Forks

Repository files navigation


⚠️ FOR AUTHORIZED RED TEAM OPERATIONS AND ETHICAL PENTESTING ONLY — Never use against systems without explicit written authorization. / SOLO PARA OPERACIONES RED TEAM AUTORIZADAS Y PENTESTING ÉTICO — Nunca usar contra sistemas sin autorización escrita explícita.


📦 Compiled Release / Versión Compilada

This repository includes the pre-compiled Windows client (v1.1) ready to use — no build required.

Este repositorio incluye el cliente Windows pre-compilado (v1.1) listo para usar — sin necesidad de compilar.

Download Windows Client v1.1

The release contains:

  • AdaptixClient.exe — Main GUI application (27 MB)
  • All Qt6 runtime DLLs (Qt6Core, Qt6Gui, Qt6Widgets, Qt6Network, Qt6WebSockets...)
  • All required plugins (platforms, imageformats, sqldrivers, tls...)
  • C++ runtime libraries (libstdc++, libgcc, libwinpthread)
  • Self-contained — no installation required, just extract and run

🌐 Idiomas / Languages


🇪🇸 Documentación en Español

¿Qué es AdaptixC2?

Adaptix es un framework extensible de post-explotación y emulación adversarial diseñado para operaciones de pentesting autorizadas y equipos red team. Es un framework C2 (Command & Control) con arquitectura cliente-servidor que soporta colaboración multiplayer entre múltiples operadores.

Este repositorio es una compilación no oficial del proyecto original Adaptix Framework, compilado y empaquetado para facilitar su uso. El código fuente original pertenece a sus respectivos autores.

Documentación oficial completa:

https://adaptix-framework.gitbook.io/adaptix-framework


🏗️ Arquitectura del Framework

El framework se divide en tres componentes principales:

┌─────────────────────────────────────────────────────────┐
│                    ADAPTIX FRAMEWORK                    │
├─────────────────┬───────────────────┬───────────────────┤
│  AdaptixServer  │  AdaptixClient    │    Extenders      │
│  (Go 1.25.4)    │  (Qt6 / C++23)    │  (Plugins .so)    │
│                 │                   │                   │
│  • Teamserver   │  • GUI Multiplat. │  • HTTP/S Beacon  │
│  • WebSocket    │  • Windows/Linux  │  • DNS/DoH Beacon │
│  • JWT Auth     │  • macOS          │  • SMB Beacon     │
│  • SQLite DB    │  • AxScript       │  • TCP Beacon     │
│  • TLS/SSL      │  • Dock UI        │  • Beacon Agent   │
│  • Event Hooks  │  • Graph View     │  • Gopher Lstnr   │
└─────────────────┴───────────────────┴───────────────────┘

AdaptixServer (Go)

El servidor backend que actúa como teamserver central:

  • Escrito en Go 1.25.4
  • Framework web Gin-Gonic con HTTP/2
  • Comunicación en tiempo real vía WebSocket
  • Autenticación con JWT tokens (access + refresh)
  • Base de datos SQLite para persistencia
  • Sistema de plugins/extenders para listeners y agentes
  • Event callbacks a Telegram, Slack, y webhooks personalizados
  • Cifrado TLS con cipher suites configurables

AdaptixClient (C++ Qt6)

La interfaz gráfica de escritorio para operadores:

  • Escrito en C++23 con Qt 6
  • Cross-platform: Windows, Linux, macOS
  • Sistema de docking dinámico (KDDockWidgets)
  • Emulación de terminal VT102 (Konsole de KDE)
  • Motor de scripting personalizado AxScript
  • Visualización de red en grafo interactivo

Extenders (Plugins)

Sistema de plugins para listeners y agentes:

  • HTTP/S Beacon Listener — Canal HTTP(S) estándar
  • DNS/DoH Beacon Listener — Canal DNS over HTTPS encubierto
  • SMB Beacon Listener — Comunicación vía protocolo SMB
  • TCP Beacon Listener — Beacon TCP raw
  • Beacon Agent — Agente principal de post-explotación
  • TCP/mTLS Gopher Listener — Protocolo Gopher con mTLS
  • Gopher Agent — Agente para protocolo Gopher

🚀 Funcionalidades

Gestión de Agentes

  • Tabla de sesiones activas con filtrado/ordenamiento
  • Monitor de salud de agentes en tiempo real
  • Sistema de etiquetado y marcado de agentes
  • Modos de comunicación sync/async
  • Control de KillDate (fecha de autodestrucción)
  • Control de WorkingTime (horario de operación)
  • Sleep y Jitter configurables

Post-Explotación

  • Terminal remota con emulación VT102
  • Consola de comandos con historial
  • Almacenamiento de tareas y jobs
  • Explorador de archivos remoto
  • Explorador de procesos remoto
  • Capturas de pantalla con anotaciones
  • Carga/descarga de archivos
  • BOF (Beacon Object File) support

Redes y Pivoting

  • SOCKS4 / SOCKS5 / SOCKS5 Auth tunneling
  • Port Forwarding local y reverso
  • Linking de agentes para pivoting
  • Visualización en grafo de la red comprometida
  • Soporte WebSocket con TLS

Gestión Operacional

  • Multi-operador con credenciales individuales
  • Chat entre operadores en tiempo real
  • Credential Vault con categorías y etiquetas
  • Target Manager con base de datos de objetivos
  • Historial de logs y eventos
  • AxScript Engine para automatización
  • Extender system para funcionalidad personalizada

📋 Requisitos

Para usar el cliente compilado (Windows):

  • Windows 10/11 (64-bit)
  • Sin dependencias adicionales (todo incluido en el ZIP)
  • Conexión al AdaptixServer desplegado

⚙️ Instalación Rápida

Cliente Windows (Pre-compilado)

1. Descargar AdaptixClient.zip desde GitHub Releases
2. Extraer en cualquier carpeta
3. Ejecutar AdaptixClient.exe
4. Conectar al AdaptixServer con las credenciales

Servidor (Linux)

# Instalar dependencias
chmod +x pre_install_linux_all.sh
sudo ./pre_install_linux_all.sh

# Compilar servidor
make server

# Generar certificados SSL
chmod +x AdaptixServer/ssl_gen.sh
./AdaptixServer/ssl_gen.sh

# Configurar perfil
nano AdaptixServer/profile.yaml

# Iniciar servidor
./dist/adaptixserver -profile AdaptixServer/profile.yaml

Con Docker

# Compilar y ejecutar
make docker-up

# Ver logs
make docker-logs

# Detener
make docker-down

🔧 Configuración del Servidor

El servidor se configura mediante profile.yaml:

Teamserver:
  interface: "0.0.0.0"
  port: 4321
  endpoint: "/endpoint"
  password: "teamserver_password"
  operators:
    operator1: "password1"
    operator2: "password2"
  cert: "server.rsa.crt"
  key:  "server.rsa.key"
  access_token_live_hours: 12
  refresh_token_live_hours: 168

EventCallback:
  Telegram:
    token: "BOT_TOKEN"
    chat_ids: ["-100XXXXXXXX"]
  Slack:
    webhook_url: "https://hooks.slack.com/..."

🇬🇧 English Documentation

What is AdaptixC2?

Adaptix is an extensible post-exploitation and adversarial emulation framework designed for authorized penetration testing and red team operations. It is a C2 (Command & Control) framework with a client-server architecture supporting multiplayer collaboration between multiple operators.

This repository is an unofficial compiled build of the original Adaptix Framework, packaged for easy deployment. The original source code belongs to its respective authors.

Full official documentation:

https://adaptix-framework.gitbook.io/adaptix-framework


🏗️ Framework Architecture

The framework is split into three main components:

Component Technology Purpose
AdaptixServer Go 1.25.4, Gin, SQLite C2 Teamserver backend
AdaptixClient Qt6, C++23, KDDockWidgets Cross-platform GUI operator console
Extenders Plugin system (.so/.dll) Listeners and agents

AdaptixServer (Go)

The backend teamserver:

  • Written in Go 1.25.4
  • Gin-Gonic web framework with HTTP/2
  • Real-time communication via WebSocket
  • JWT token authentication (access + refresh)
  • SQLite database for state persistence
  • Plugin/extender system for listeners and agents
  • Event callbacks to Telegram, Slack, and custom webhooks
  • Configurable TLS with hardened cipher suites

AdaptixClient (C++ Qt6)

Desktop GUI for operators:

  • Written in C++23 with Qt 6
  • Cross-platform: Windows, Linux, macOS
  • Dynamic docking system (KDDockWidgets)
  • VT102 terminal emulation (KDE's Konsole)
  • Custom AxScript scripting engine
  • Interactive network graph visualization

Extenders (Plugins)

Plugin system for listeners and agents:

  • HTTP/S Beacon Listener — Standard HTTP(S) channel
  • DNS/DoH Beacon Listener — DNS over HTTPS covert channel
  • SMB Beacon Listener — SMB protocol communications
  • TCP Beacon Listener — Raw TCP beacon
  • Beacon Agent — Main post-exploitation agent
  • TCP/mTLS Gopher Listener — Custom protocol with mTLS
  • Gopher Agent — Agent for Gopher protocol

🚀 Features

Agent Management

  • Live sessions table with filtering/sorting
  • Real-time agent health monitoring
  • Agent tagging and marking system
  • Sync/async communication modes
  • KillDate scheduling (auto-termination)
  • WorkingTime restriction control
  • Configurable sleep and jitter

Post-Exploitation

  • Remote terminal with VT102 emulation
  • Command console with history
  • Task and job storage
  • Remote file browser
  • Remote process browser
  • Screenshot capture with annotations
  • File upload/download manager
  • BOF (Beacon Object File) support

Networking & Pivoting

  • SOCKS4 / SOCKS5 / SOCKS5 Auth tunneling
  • Local and reverse port forwarding
  • Agent linking for pivoting
  • Network graph visualization of compromised hosts
  • WebSocket communications with TLS

Operational Management

  • Multi-operator support with individual credentials
  • Real-time chat between operators
  • Credential Vault with categories and tags
  • Target Manager database
  • Log and event history
  • AxScript Engine for automation
  • Extensible plugin architecture

📋 Requirements

To use the pre-compiled client (Windows):

  • Windows 10/11 (64-bit)
  • No additional dependencies (everything included in the ZIP)
  • Connection to a deployed AdaptixServer

⚙️ Quick Installation

Windows Client (Pre-compiled)

1. Download AdaptixClient.zip from GitHub Releases
2. Extract to any folder
3. Run AdaptixClient.exe
4. Connect to AdaptixServer with credentials

Server (Linux)

# Install dependencies
chmod +x pre_install_linux_all.sh
sudo ./pre_install_linux_all.sh

# Build server
make server

# Generate SSL certificates
chmod +x AdaptixServer/ssl_gen.sh
./AdaptixServer/ssl_gen.sh

# Configure profile
nano AdaptixServer/profile.yaml

# Start server
./dist/adaptixserver -profile AdaptixServer/profile.yaml

With Docker

# Build and start
make docker-up

# View logs
make docker-logs

# Stop
make docker-down

🔧 Server Configuration

The server is configured via profile.yaml:

Teamserver:
  interface: "0.0.0.0"
  port: 4321
  endpoint: "/endpoint"
  password: "teamserver_password"
  operators:
    operator1: "password1"
    operator2: "password2"
  cert: "server.rsa.crt"
  key:  "server.rsa.key"
  access_token_live_hours: 12
  refresh_token_live_hours: 168

EventCallback:
  Telegram:
    token: "BOT_TOKEN"
    chat_ids: ["-100XXXXXXXX"]
  Slack:
    webhook_url: "https://hooks.slack.com/..."

📦 Release Contents (v1.1 Windows Binary)

AdaptixClient-v1.1-Windows/
├── AdaptixClient.exe          (27 MB) ← Main application
├── Qt6Core.dll                (11 MB) ← Qt core library
├── Qt6Gui.dll                 (11 MB) ← Qt GUI rendering
├── Qt6Widgets.dll             (6.8 MB)← Qt widget framework
├── Qt6Network.dll             (2.0 MB)← Network protocols
├── Qt6WebSockets.dll          (212 KB)← WebSocket support
├── Qt6Sql.dll                 (332 KB)← Database connectivity
├── Qt6Qml.dll + Qt6Quick.dll  (13 MB) ← QML/Quick engine
├── opengl32sw.dll             (20 MB) ← Software OpenGL renderer
├── D3Dcompiler_47.dll         (4.0 MB)← DirectX shader compiler
├── libstdc++-6.dll            (2.2 MB)← C++ standard library
├── platforms/qwindows.dll             ← Windows platform plugin
├── imageformats/                      ← JPEG, WebP, SVG, GIF...
├── sqldrivers/                        ← SQLite, PostgreSQL...
├── tls/                               ← TLS/SSL backends
└── styles/qmodernwindowsstyle.dll     ← Modern Windows theme

📚 References


⚠️ Legal Notice / Aviso Legal

EN: This tool is designed for AUTHORIZED security testing and red team operations ONLY. Unauthorized use is strictly prohibited and may violate local and international laws (CFAA, Computer Misuse Act, GDPR and equivalents). Use at your own risk.

ES: Esta herramienta está diseñada ÚNICAMENTE para pruebas de seguridad autorizadas y operaciones de equipo rojo. El uso no autorizado está estrictamente prohibido y puede violar leyes locales e internacionales. Úsela bajo su propia responsabilidad.


GitHub Docs Telegram

About

Post-exploitation C2 framework for security research

Resources

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages