Now to demonstrate and show you the product and how it’s used :

homepage.PNG

When your run streamlit run cyberphantom_ui.py you get taken to your browser, and a local server hosts the frontend of the C2 framework, this works better because it allows you to delete clients, commands and responses .

You can select a client which you want to view its responses or upload commands to , from the homepage here, or you can delete a client .

If you don’t have a client yet , and you want to infect a new victim, what you do is this:

newclient.PNG

  Now input the clients name, the check interval, which is how often the payload checks the cloud for new commands , then select the payload type, you can choose [.py] if you’re on linux and need to compile it on a windows pc , else it’s advised to run this tool on windows so that you can easily compile it into a windows executable . So choose the second option which is windows executable 

Next input the path to the icon file you wish to use and click the “ create client and generate payload “ button, this creates a folder in the folder you shared with the API , the folder is named after your client, and inside that folder is the commands and resposnes folder, the commands are sent to the commands folder, and responses to the responses folder, that’s how you access them.

Next you can create a dropper to deliver it to your client safely .

newdropper.PNG

With this you can specify where the payload lands, all you have to do is upload the payload to ypur MEGA cloud, and copy the download link and paste it here.

Specify where it lands , and the path to the icon.

now a new exe file will be created, and when the client clicks on it, the payload is directly downloaded to where you specified, the purpose of this is to evade scanners and chrome’s security.

Now when your client clicks on the payload , automatically you get a heartbeat sent to your responses , to show that the client has been successfully compromised , now you can upload commands in powershell in a txt file and the client will execute it and the payload will send the response back to you .

client.PNG

In the image above I selected a client, and i can uplaod new commands and wait for their responses. the commands are stored in the custom_commands folder, you can add new commands as you see fit .

THE CLI :