NOTE : This is a hobby project and is solely created for educational/learning purposes. The author/creator doesn't provide any warranty nor will take any liabilities for any damage caused due to usage of the framework.

Find the entire palylist of videos guiding you through SpyderC2 here : https://www.youtube.com/watch?v=8_-6r0F0kSg&list=PLJ67Um6OelSn1e1fir521obmkbrI4-g-0

• Supports windows and linux and Android (x86 architecture apk generation tested on ubuntu, Docker recommended) victims
• Docker support
• Evil stuff/modules you can do/run on your victim :
  • Taking Screenshots
  • Taking out Browser History
  • See the running processes
  • File download/exfiltration
  • Persistence
  • Reverse shell
• New modules are easy to write and integrate
• No window pops up when stager is executed on victim (Windows and Linux).

• It's much easier to use the docker version to not run into dependency issues(Especially recommended for Android stager). If you want android victims then use docker for more success rate in generating stager APK.

• Install Docker for your distro

• Get Docker Compose from here

• Now simply run :

   ## SPYDERC2_HOST_PATH should point to wherever you downloaded the repo
   SPYDERC2_HOST_PATH=/home/kali/SpyderC2 docker-compose up

• Once the 2 containers spins up (Python and MongoDB), run the following :

   docker exec -it server python3 /home/attacker/SpyderC2/main.py

• You should be greeted with SpyderC2 server console. Now follow the below steps to try out the framework

• Android Stager generation has been tested in debian based OS(Ubuntu to be specific). So better to use the docker based installation for this.
• Stager is generated for x86 based Android Architecture (like Genymotion). Real android devices are arm based, testing for them needs to be done in future.
• We use buildozer scripts to generate the apk from the python scripts.
• Creation of android stager takes some time for the first time (around 15-20 mins).
• For fresh compilation of android stager, you might want to delete th folder buildozer_docker created from previous creations.

• First run a listener, by running http. Check in the logs if the listener is started successfully.

• Then you would want to generate a payload/stager , by running generate command. Enter your listener/host's IP address and listener port. A stager should be generated

• Then copy this stager.exe to the victim Windows machine.

• Double click the stager.exe on the victim. You should see a new victim with an ID in logs.

• Check the vicitm list using 'vicitms' command.

• To do evil stuff on victim, run 'use <victim_id>'.

• Now you are in victim help menu. Run 'modules' to see the stuff you can run on teh victim.

• To run a module, use <module_name> , ex : use screenshot.

• You can then modify the arguments available for that module, Ex , you can set the path where screenhsot will be saved on the attacker/host machine, using 'set path /home'. It's optional as by default they will be stored in victim/<victim_id> folder.

• Now to run this module on victim, execute - 'run'

• Check in the logs you will see the script/task bein issue to the victim, and logs will also show where the output/screenshot is being stored.

• A look at the various chnagelogs / progress in the framework : https://github.com/Ayantaker/SpyderC2/wiki/changelog

• Future Work : https://github.com/Ayantaker/SpyderC2/wiki/Future-Work

• To Contribute check here : https://github.com/Ayantaker/SpyderC2/wiki/Contribute