zuthaka - Zuthaka is an open source application designed to

项目说明

<di="center">
<a href="
<img src=".img/ll-color-zuthaka-f-.png" alt="Logo" width="790" height="215">
</a>
<br />

<a href="
<img alt="Discord" src="
</a>
<a href="
<img alt="contact" src="
</a>
<a href="
<img alt="GitHub issues" src="
</a>

</div>
<br />
<p align="center">

<p align="center">
A collaborative free open-source Command & Control integration framework that allows de to concentrate on the core function and goal of their C2.
<br />
<a href=" the docs »</strong></a>
<br />
<br />
<!--<a href=" Demo</a> -->
·
<a href=" Bug</a>
·
<a href=" Feature</a>
·
</p>
</p>

<details open="open">
<summary>Table of Contents</summary>
<ol>
<li>
<a href="#about-the-project">About The Project</a>
<ul>
<li><a href="#problem-statement">Problem statement</a></li>
<li><a href="#solution">Solution</a></li>
<li><a href="#built-with">Built With</a></li>
</ul>
</li>
<li><a href="#already-supported-c2">Already Supported C2</a></li>
<li>
<a href="#getting-started">Getting Started</a>
<ul>
<li><a href="#prerequisites">Prerequisites</a></li>
<li><a href="#installation">Installation</a></li>
</ul>
</li>
<li><a href="#usage">Usage</a></li>
<li><a href="#roadmap">Roadmap</a></li>
<li><a href="#license">License</a></li>
<li><a href="#contact">Contact</a></li>
</ol>
</details>

About the project

Problem Statement

The current C2s ecosystem has rapidly grown in order to adapt to modern red team operations and diverse needs \(further information on C2 selection can be found here\). This comes with a lot of o work for Offensi professionals e. Creating a C2 is already a demanding task, and most C2s a lack an intuitive and easy to use web interface. Most Red Teams must independently administer and understand each C2 in their infrastructure.

Solution

With the belief that community efforts surpass that of any indi, Zuthaka presents a simplified API for fast and clear integration of C2s and provides a centralized management for multiple C2 instances through a unified interface for Red Team operations.

Zuthaka is more than just a collection of C2s, it is also a solid foundation that can be built upon and easily customized to meet the needs of the exercise that needs to be accomplish. This integration framework for C2 allows de to concentrate on a unique target en and not have to reinvent the wheel.
!Zuthaka Framework

Built With

* Django Rest Framework
* Redis
* ReactJS
* Nginx
* Docker
* PostgreSQL

Getting Started

Zuthaka is composed of a front-end that exposes a UI for the API of process manager, file manager, shell post-exploitation modules and general C2 handling, and a back-end, in charge of handling the consistency and a issues of the C2s instantiated in Zuthaka. Also deployed is Redis as a message broker to handle asynchronously every element in the Agent's UI and an Nginx server.

Prerequisites

The installation of a working Docker instance is necessary for the automatic deployment of the essential infrastructure (Zuthaka's frontend and backend, Nginx, Redis). All the desired C2s that need to be handled should be deployed in parallel.

Installation

To build the full Zuthaka project, first download dependencies.

To start the project with the corresponding services, the docker-compose file can be utilized.

Usage

!Demogif

After de solution is deployed, the a class handlers will be incorporated on zuthaka for you to use it to integrate your infrastructure.

_For further information, please refer to the Documentation_

Unreleased

Added

* service instantiation of C2
* service creation of listeners
* service deletion of listeners
* service download of launchers
* service agent integration
* Automatic database collection of handler classes
* "out of the box" listing of ProcessManager and FileManager

Roadmap

* service usage of post-exploitation modules

License

Distributed under the BSD-3 clause License. See LICENSE.md for more information.

Contact

<img src=" width=100 height=100 align="left">

Pucara team - -

Zuthaka community on discord - Zuthaka

Project Link:

项目信息

开发语言：Python

Star 数：181

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and other post-exploitation tools. 展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。