VulnScanners Logo

Command & Control

Merlin

HTTP/2 cross-platform C2 written in Go.

c2
merlin — terminal
$ ./merlinServer-Linux-x64 -i

What it does

Merlin is a cross-platform C2 that leverages HTTP/2 (among others) for agent communications. It's useful for exercising modern, protocol-aware defenses.

Common use cases

  • •Exercise HTTP/2-based C2 traffic against modern network-defense appliances.
  • •Deploy Go-based agents on Linux and macOS targets where PowerShell tools are unavailable.
  • •Test data-exfiltration scenarios through HTTP/2 streams with built-in encryption.

Key features

  • •Agent and server written in Go for cross-platform deployment with no external dependencies.
  • •C2 over HTTP/2 with optional HTTP/1.1 fallback compatibility mode.
  • •Supports AES-encrypted communications with configurable key rotation intervals.
  • •Native Linux and macOS agent support in addition to standard Windows implants.

Source

https://github.com/Ne0nd0g/merlin ↗

More Command & Control tools

MetasploitThe exploitation and post-exploitation framework.EmpirePowerShell and Python C2 framework.Covenant.NET command-and-control framework.SliverCross-platform adversary-emulation C2.

Need hosted scanning instead of local tooling?

Run a scan in the browser →