Skip to content

Releases: WithSecureLabs/C3

v1.4.0

21 Oct 15:00
Compare
Choose a tag to compare

New channels:

  • Mattermost (by @mgeeky)
  • Discord
  • Jira Issue

Framework changes:

  • UTF8 support for command parameters
  • Upgrade to .Net Core 3.1
  • Renaming existing relays
  • Additional small fixes.

v1.3.0

22 Dec 12:33
Compare
Choose a tag to compare
  • New channels:
  • Fixes:
    • change Github channel default branch to main
    • fix token refresh in GoogleDrive channel
  • Channel linter:
    • new -o mode for channels that can only hold a single message (eg LDAP)
    • new check for packet direction

v1.2.0

17 Aug 15:08
Compare
Choose a tag to compare
  • Channels:
    • Asana
    • Dropbox
    • Github
    • GoogleDrive
    • MSSQL
    • OneDrive365 - New MS yara rules detects C2 after few hours
    • Outlook365 - New MS yara rules detects C2 after few hours
  • Various updates to existing channels - replace deprecated API, improve stability, add user-agent header
  • Partial Clang support
  • Dedicated WinHttp wrapper - replacing cpprestsdk decreased payload size
  • ChannelLinter - support chunking, and add new tests
  • CebuLoader update for W10 20H1
  • Upgraded ByteConverter - One allocation Write. Helpers TupleConverter, PointerTupleConverter
  • Bugfixes

v1.1.0

10 Mar 10:03
Compare
Choose a tag to compare
  • Add support for Covenant Connector and Peripheral
  • Add shellcode relay (using donut and CebuLoader)
  • Add ChannelLinter to speed up channel debugging
  • Downgrade dotnet target framework to 2.1 (LTS)
  • Add support for receiving multiple packets from single OnReceiveFromChannel() call
  • Change frontend style to match F-Secure LABS brand
  • Fix UncShareFile rename/read race condition bug where empty packets where received
  • Add eager loading of libsodium and early exit in WebController (bug with Gateway not connecting to WebController)
  • Terminate thread and release memory when CS beacon closes.

Release 1.0.0

02 Sep 12:06
Compare
Choose a tag to compare
Release C3 publicly