httpx

This is a Mythic C2 Profile called httpx. This is a community request C2 Profile for Mythic that provides a more dynamic and configurable HTTP profile. This profile offers the following features:

• Callback Domains (array of values)
• Domain Rotation (fail-over and round-robin)
• Domain Fallback Threshold (for fail-over how many failed attempts before moving to the next)
• Encrypted Key Exchange and AES256 Keyed HMAC
• Callback Jitter and Sleep intervals
• Agent Message and Server Response configurations provided via JSON or TOML files at Build time that offer:
  • Message location in cookies, headers, query parameters, or body
  • Message transforms with base64, base64url, append, prepend, xor, netbios, and netbiosu
  • Custom Client/Server headers
  • Custom Client query parameters

How to install an agent in this format within Mythic

When it's time for you to test out your install or for another user to install your c2 profile, it's pretty simple. Within Mythic you can run the mythic-cli binary to install this in one of three ways:

• sudo ./mythic-cli install github https://github.com/user/repo to install the main branch
• sudo ./mythic-cli install github https://github.com/user/repo branchname to install a specific branch of that repo
• sudo ./mythic-cli install folder /path/to/local/folder/cloned/from/github to install from an already cloned down version of an agent repo

Now, you might be wondering when should you or a user do this to properly add your profile to their Mythic instance. There's no wrong answer here, just depends on your preference. The three options are:

• Mythic is already up and going, then you can run the install script and just direct that profile's containers to start (i.e. sudo ./mythic-cli start profileName.
• Mythic is already up and going, but you want to minimize your steps, you can just install the profile and run sudo ./mythic-cli start. That script will first stop all of your containers, then start everything back up again. This will also bring in the new profile you just installed.
• Mythic isn't running, you can install the script and just run sudo ./mythic-cli start.