Introducing Phantom C2: The Next-Generation Cloud-Based Command & Control Platform

What is Phantom C2?

CloudPhantom C2 is a modern, stealthy, and highly modular Command & Control (C2) framework designed for red teamers, penetration testers, and advanced security professionals. Leveraging the power and ubiquity of Google Drive, CloudPhantom C2 enables seamless, covert, and persistent management of remote agents and payloads—all through a beautiful, intuitive Streamlit web interface. The easiest, smoothest and stealthiest way to hack your targets , steal files, monitor, and pivot. FULL CONTROL

DEMO VIDEOS:

https://drive.google.com/file/d/1J5DCgVqjomPTYwwkG8OhwRIw18a8WWYQ/view?usp=drivesdk

https://drive.google.com/file/d/1yvfhbmg6gnV_mY5l8zTwxx66obonoscm/view?usp=drivesdk

Key Features & Capabilities

☁️ Cloud-Native Stealth

• Google Drive as C2 Channel: All command, control, and exfiltration traffic is tunneled through Google Drive, blending in with legitimate cloud activity and bypassing most network security controls.
• No Dedicated Infrastructure Needed: Operate from anywhere, anytime, without exposing your own servers.

🖥️ Powerful Web UI

• Streamlit-Powered Dashboard: Manage clients, generate payloads, deploy droppers, and review responses—all from a responsive, user-friendly web interface.
• Real-Time Feedback: Progress bars, status messages, and error handling keep you informed at every step.

🛠️ Payload & Dropper Generation

• Customizable Payloads: Generate Windows payloads as Python scripts or fully compiled executables (.exe), with options for persistence and privilege escalation. Each payload is completely different , with different hashes ensuring you evade static detection based on hashes.

• FUD Dropper Builder: Create fully undetectable (FUD) droppers that download and execute payloads from MEGA.nz, with optional admin and persistence features. this helps bypass the scans by chrome browser and allows you pass something harmless through google drive or email

🔒 Advanced Persistence & Evasion