PoshC2 is a proxy aware C2 framework written completely in PowerShell to aid penetration testers with red teaming, post-exploitation and lateral movement. The tools and modules were developed off the back of our successful PowerShell sessions and payload types for the Metasploit Framework. PowerShell was chosen as the base language as it provides all of the functionality and rich features required without needing to introduce multiple languages to the framework.

Find us on #Slack - poshc2.slack.com

Requires only Powershell v2 on both server and client

C2 Server

Implant Handler

powershell -exec bypass -c "IEX (New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/nettitude/PoshC2/master/C2-Installer.ps1')"

Create one PoshC2 team server and allow multiple red teamers to connect using the C2 Viewer and Implant Handler

For more info see the GitHub Wiki