C2 Profiles

A C2 Profile can be used to customise/override default settings and behavours of the implant. These currently only apply to the HTTP implant. They are defined in YAML format and must be present in the team server’s C2Profiles directory to be loaded.

HTTP

Option	Description	Data Type
Sleep	The sleep interval of the implant in seconds	`Int32`
Jitter	The jitter of the sleep interval as a percentage	`Int32`
GetPaths	The URL paths to use on GET requests	`String[]`
PostPaths	The URL paths to use on POST requests	`String[]`

Note

The GET and POST paths are selected randomly on each use.

Example Profile

Name: default
Http:
  Sleep: 60
  Jitter: 10
  GetPaths:
    - /index.php
    - /news.php
  PostPaths:
    - /submit.php
    - /upload.php