Mythic - A collaborative, multi-platform, red teaming frame

项目说明

<p align="center">
<a href="
<img src="
alt="Activity"/></a>
<img src=" GitHub Tag"/>
<img src="
alt="commits since last release"/>
<a href="
<img src="
alt=" on Twitter"/></a>
<a href="
<img src=" Slack-4A154B?logo=slack&logoColor=white"
alt="chat on Bloodhound Slack"></a>
<a href="
<img src="
alt="Sponsored by SpecterOps"/>
</a>
</p>

Mythic

A cross-platform, post-exploit, red teaming framework built with GoLang, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming.

* Check out a series of YouTube showing Operator usage
* Check out a series of YouTube showing De tips and tricks

Starting Mythic

Mythic is controlled via the mythic-cli binary. To generate the binary, run sudo make from the main Mythic directory.
From there, you can run sudo ./mythic-cli start to bring up all default Mythic containers.

More specific setup instructions, configurations, examples, screenshots, and more can be found on the Mythic Documentation website.

Installing Agents and C2 Profiles

The Mythic repository itself does not host any Payload Types or any C2 Profiles. Instead, Mythic provides a command, ./mythic-cli install github <url> [-b branch name] [-f], that can be used to install agents into a current Mythic instance.

Payload Types and C2 Profiles can be found on the o page.

To install an agent, simply run the script and provide an argument of the path to the agent on GitHub:

The same is true for installing C2 Profiles:

This allows the agents and c2 profiles to be updated at a much more regular pace and separates out the Mythic Core components from the rest of Mythic.

Updating

Use the ./mythic-cli update command to check for a updates across mythic-cli, mythic_server, and mythic_react's UI.
This will _NOT_ do the update for you, but let you know if an update exists. To check for updates against a specific branch, use ./mythic-cli update -b [branch name].

Mythic Docker Containers

<p align="left">
<img src=" DockerHub Release&sort=semver" alt="latest docker "/>
<img src=" GitHub Tag"/>
</p>

Mythic uses Docker and Docker-compose for all of its components, which allows Mythic to provide a wide range of components and features without having requirements exist on the host. However, it can be helpful to ha into how the containers are configured. All of Mythic's docker containers are hosted on DockerHub under itsafeaturemythic.

mythic_go_base - Dockerfile

- <img src=" alt="image size"/>
- <img src=" alt="docker pull count" />

mythic_go_dotnet - Dockerfile

- <img src=" alt="image size"/>
- <img src=" alt="docker pull count"/>

mythic_go_macos - Dockerfile

- <img src=" alt="image size"/>
- <img src=" alt="docker pull count"/>

mythic_python_base - Dockerfile

- <img src=" alt="image size"/>
- <img src=" alt="docker pull count"/>

mythic_python_dotnet - Dockerfile

- <img src=" alt="image size"/>
- <img src=" alt="docker pull count"/>

mythic_python_macos - Dockerfile

- <img src=" alt="image size"/>
- <img src=" alt="docker pull count"/>

mythic_python_go - Dockerfile

- <img src=" alt="image size"/>
- <img src=" alt="docker pull count"/>

Additionally, Mythic uses a custom PyPi package (mythic_container) and a custom Golang package () to help control and sync information between all the containers as well as pro an easy way to script access to the server.

Dockerfiles for each of these Docker images can be found on MythicMeta.

mythic-container PyPi

<p align="left">
<img src=" alt="mythic-container downloads" />
<img src=" alt="mythic-container python " />
<img src=" alt="mythic-container " />
<img src=" GitHub Tag&color=orange" alt="latest tags" />
</p>

The mythic-container PyPi package source code is a on MythicMeta and is automatically installed on all of the mythic_python_* Docker images.

This PyPi package is responsible for connecting to RabbitMQ, syncing your data to Mythic, and responding to things like Tasking, Webhooks, and configuration updates.

github.com/MythicMeta/MythicContainer

<p align="left">
<img src=" alt="MythicContainer go "/>
<img src=" alt="MythicContainer latest stable " />
</p>

The github.com/MythicMeta/MythicContainer Golang package source code is a on MythicMeta.

This Golang package is responsible for connecting to RabbitMQ, syncing your data to Mythic, and responding to things like Tasking, Webhooks, and configuration updates.

Mythic Scripting

<p align="left">
<img src=" alt="mythic scripting downloads" />
<img src=" alt="mythic scripting python " />
<img src=" alt="mythic scripting latest pypi " />
<img src=" GitHub Tag&color=orange" alt="latest release" />
</p>

* Scripting source code ()

Documentation

All documentation for the Mythic project is being maintained on the docs.mythic-c2.net website.
The backing code for the documentation is in the Mintlify_Dcumentation repository in MythicMeta.

Contributions

A bunch of people ha through bug reports, changes, and fixes to help make this project better. Thank you!

The following people ha a lot to the project. As you see their handles throughout the project on Payload Types and C2 Profiles, be sure to reach out to them for help and contributions:

Sponsors

w33ts /

DonnieMarco

Liability

This is an open source project meant to be used with authorization to assess the security posture and for research purposes.

Historic References

* Check out a series of YouTube showing how Mythic looks/works and highlighting a few key features
* Check out the blog post on the rebranding.
* BSides Seattle 2019 Slides: Ready Player 2: Multiplayer Red Teaming against macOS
* BSides Seattle 2019 Demo : A on my Youtube
* Objective By the Sea 2019 talk on JXA:
* Objective By the sea 2019 Video:

项目信息

开发语言：JavaScript

Star 数：4813

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A collaborative, multi-platform, red teaming framework展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。