anasC2 is a browser-based command and control (C2) framework developed as part of a red teaming toolkit by Anas Labrini. This framework is designed to provide cybersecurity professionals and red teams with an efficient and lightweight way to interact with compromised clients directly through their browsers using modern web technologies. AnasC2 is built using Python (Flask) and Flask-SocketIO on the backend, and JavaScript on the client side. It establishes real-time, two-way communication between the admin panel and infected web clients using WebSockets. The tool allows the operator to monitor and control multiple clients through a simple and efficient web interface. At its core, the tool works using a JavaScript payload (hook.js) injected into the target browser. Once activated, this script connects to the C2 server, enabling control of the client through the management interface. From there, the operator can execute various commands, such as sending fake alerts, redirecting the user to malicious or cloned pages, running JavaScript code within the victim's browser, and more. anasC2 is a modular and extensible platform, with key features including a real-time dashboard, multi-client management, and support for advanced modules that will be added in future updates, such as keystroke logging, clipboard access, file upload/download, camera access (with permission), and credential phishing templates. Additional features are also being developed, such as stealth mode, geolocation tracking, session persistence, and advanced DOM control. This project aims to simulate client-side attack scenarios in a legal and ethical environment, making it highly useful for internal coordination processes, penetration testing labs, or ethical hacking demonstrations. anasC2 is part of a broader initiative to build lightweight, efficient, and customizable offensive security tools, demonstrating the power of combining traditional backend technologies with browser-based payloads to achieve complete control from a simple web interface. ⚠️ Disclaimer: This tool is intended exclusively for ethical hacking, educational use, and legal penetration testing. Anas Labrini is not responsible for any misuse. You can find the source code and updates on the official GitHub repository. You can click on GitHub to access the repository.

Back $_ warehouse $_