The cyber-pirate's guide to C2 development - Gerhard Botha | BSides Cape Town 2023
Channel: BSides Cape Town
Date: 2023-12-19

A beginner-friendly and somewhat technical talk about C2 development. It will go over the basics of what is a C2, why, and where you might want to use it. Then we'll dive into the madness behind developing one!

The breakdown of the talk:
Overview of a C2.
This section will cover the fundamentals of what a C2 is and why/where it's used.

Difference between a server and a framework.
Dissecting the difference between a server and framework, then the usages, pro's, and cons of each will be discussed.

Framework architecture overview – client, server, beacon.
The different pieces that need to fit together to make up a framework, along with the considerations one needs to make before getting started. Usability vs performance, Gui vs Cli, purple teaming vs stealth ops, languages to use, etc.

Designing your framework – How I designed mine.
This will cover some practical examples and design choices that went into mine. This will cover the project layout and how I designed my beacon.

Dev to beyond and considerations.
What you will need to keep in mind before releasing your project and some opsec tips not to burn you malware before you get to use it on live environments.

Lessons learned and experienced.
Some lessons and advice that will hopefully carry you through this project.

Project examples to check out.
Projects I use as "motivation" when designing and coding my project. And hopefully, you can use them too!

Cool courses to get you started.
More information for you to get started, but you want a guiding hand to help you out with the concepts and get you familiar with a programming language.

Filmed at BSides Cape Town 2023
AV Sponsored by BITM Cyber Security