I am witherrors and I am building a Linux first c2 framework. For the first time. In public. Yikes.
Most public c2 tooling is Windows first, has plenty of research, and communities are well established. The Windows space to me feels crowded. I think Linux has a good bit of attack surface now — cloud infra, containers, CI/CD — and it's comparatively underserved. I think there is work to be done.
I have spent professional time as a SOC analyst, a threat hunter, a penetration tester, and as a red teamer. Always a tool user, never a tool developer (I have excuses but no good ones). I need to take the next step. This will be an educational blog of that journey with ALOT of stupidity along the way.
Usually when I come across tools they are in a completed state. Unfortunately, you do not get a glimpse into design decisions, roadblocks, mistakes, etc, unless you've built similar tooling. That is the purpose of this site. To provide a window into that process and if anything else, watch a caveman bang on a keyboard for your amusement.
This project is purely for educational purposes. Only pop your own boxes. This does not reflect views of my employer.
Words. Words. Words.