merlin - Merlin is a cross-platform post-exploitation HTTP/

项目说明

![CodeQL]()
![GoReportCard]()
![License: GPL v3]()
![Release]()
![Downloads]()
![Twitter Follow]()

Merlin

<p align="center">
<img alt="Merlin Logo" src="docs/images/merlin.png" height="30%" width="30%">
</p>

Merlin is a cross-platform post-exploitation Command & Control 服务端 and agent written in Go.

Highlighted features:

merlin-cli command line interface over gRPC to connect to the Merlin Ser multi-user support

Supported Agent C2 Protocols: http/1.1 clear-text, http/1.1 over TLS, HTTP/2, HTTP/2 clear-text (h2c), http/3 (http/2 over QUIC)

Peer-to-peer (P2P) communication between Agents with bind or reverse for SMB, TCP, and UDP

Configurable agent data encoding and encryption transforms: AES, Base64, gob, hex, JWE, RC4, and XOR

- JWE transform use PBES2_HS512_A256KW PBES2 (RFC 2898) with HMAC
SHA-512 as the PRF and AES Key Wrap (RFC 3394) using 256-bit keys for the encryption scheme

Configurable agent authenticators:

- None: No authentication
- OPAQUE: Asymmetric Password Authenticated Key Exchange (PAKE)

Encrypted JWT for message authentication

Configurable Agent message data padding

to combat beaconing detections based on a fixed message size

Execute .NET assemblies in-process with in or in a sacrificial process with execute-assembly

Execute arbitrary Windows executables (PE) in a sacrificial process with execute-pe

shellcode execution techniques: CreateThread, CreateRemoteThread, RtlCreateUserThread, QueueUserAPC

Integrated Donut, sRDI,

and SharpGen support

Dynamically change the Agent's JA3 hash

Mythic support

Documentation & Wiki

An introductory blog post can be found here: <

Supporting Repositories:

Merlin Agent - Agent source code

Merlin Agent DLL - Agent DLL 源码 代码

Merlin CLI - Command line interface for Merlin

Merlin Documentation - Documentation 源码 代码

Merlin on Mythic - Merlin agent for Mythic 框架

Merlin Docker - Base Docker image for for Merlin images

Merlin Message - A Go library for Merlin messages exchanged between a Merlin 服务端 and Agent

Quick Start

1. Download the latest of Merlin 服务端 from the releases section
> The Ser contains compiled of the CLI and Agent for all the major operating systems in the data/bin directory
2. Extract the files with 7zip using the x function The password is: merlin
3. Start Merlin
4. Start the CLI
5. Configure a listener
6. Deploy an agent. See Agent Execution Quick Start Guide for examples
7. Pwn, Pivot, Profit

Mythic

Merlin can be integrated and used as an agent with the Mythic a
collaborati, red teaming framework.

Visit the Merlin on Mythic repository in the MythicAgents organization
to get started.

Misc.

* To compile Merlin from 源码, view the Custom Build page
* For a full list of a commands:
* Main Menu
* Listener Menu
* Agent Menu
* Module Menu
* View the Frequently Asked Questions page
* View the Blog Posts page for additional information

Slack

Join the #merlin channel in the BloodHoundGang Slack to ask questions,
troubleshoot, or provide feedback.

JetBrains

Thanks to JetBrains for kindly sponsoring Merlin by pro a Goland IDE
Open Source license

<p align="center">
<img alt="JetBrains Logo" src="docs/images/jetbrains-.png" height="40%" width="40%">
<img alt="GoLand Logo" src="docs/images/icon-goland.png" height="20%" width="20%">
</p>

项目信息

开发语言：Go

Star 数：5610

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Merlin is a cross-platform post-exploitation HTTP/2 Command & Control 服务端 and agent written in golang.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。