RedTeamCoin

---

RedTeamCoin is a blockchain-based cryptocurrency mining pool implementation designed for authorized security testing and red team operations. Built in Go with Java client support, it simulates real-world cryptomining attacks to help organizations assess their detection capabilities and quantify potential damage from threat actor mining operations.

This tool enables security teams to safely and legally demonstrate cryptomining attack scenarios on corporate systems, generate comprehensive impact reports, and validate security controls—all within a controlled environment using an isolated, non-public blockchain.

Table of Contents

• Overview
• Features
• Quick Start
• How It Works
• Usage
  • Running the Server
  • Running a Miner
  • Connecting to Remote Servers
• GPU Mining
• Configuration
• API Reference
• Architecture
• Development
• Contributing
• Troubleshooting
• Documentation
• License
• Acknowledgments

Overview

Why use RedTeamCoin?

• Demonstrate the real-world impact of cryptojacking attacks
• Test and validate security monitoring and detection systems
• Generate quantifiable damage assessments for executive reporting
• Safely simulate mining operations without connecting to public blockchains

System Components:

• Mining Pool Server - Manages blockchain and coordinates work distribution
• Client Miners - CPU/GPU mining clients (Go and Java implementations)
• Web Dashboard - Real-time monitoring, control, and statistics
• Analysis Tools - Generate comprehensive damage assessment reports

Features

• Blockchain Implementation: Custom proof-of-work blockchain with configurable difficulty
• Mining Pool Server: Manages multiple miners and work distribution via gRPC
• Client Miners: Automated mining clients (Go and Java) with IP address and hostname logging
• Java Standalone Miner: GUI-enabled desktop miner with visual interface
• Java gRPC Client: Headless gRPC client for servers and automation
• Server-Side Miner Control: Pause, resume, throttle CPU usage, and delete miners remotely
• CPU Throttling: Limit miner CPU usage from 0-100% to manage resources
• GPU Mining Support: CUDA and OpenCL support for GPU-accelerated mining
• Hybrid Mining: Simultaneous CPU and GPU mining for maximum performance
• Web Dashboard: Real-time monitoring of miners, statistics, and blockchain with control buttons
• REST API Authentication: Secure token-based authentication for API endpoints
• Client gRPC TLS Encryption: Optional TLS encryption for secure client-server gRPC connections
• Dual IP Tracking: Records both client-reported and server-detected IP addresses
• CPU & GPU Statistics: Comprehensive resource usage tracking and reporting
• Protocol Buffers: Efficient client-server communication using protobuf/gRPC
• Auto-Termination: Miners automatically shut down and self-delete when removed from the server

Quick Start

Get RedTeamCoin running in under 5 minutes:

Prerequisites

• Go 1.21 or later
• Protocol Buffer Compiler (protoc)

Ubuntu/Debian:

sudo apt update
sudo apt install -y golang-go protobuf-compiler

macOS:

brew install go protobuf

Windows:

• Install Go from https://golang.org/dl/
• Install protoc from https://github.com/protocolbuffers/protobuf/releases

Installation

# Clone the repository
git clone https://github.com/xyplex3/RedTeamCoin.git
cd RedTeamCoin

# Install dependencies
make install-tools
make deps

# Build server and client
make build

Verification

Verify the build completed successfully:

ls -lh bin/
# Expected output: server and client binaries (1-5 MB each)

./bin/server --help
# Expected output: Usage information for the server

Running Your First Mining Pool

1. Start the server:

make run-server

You should see output like:

RedTeamCoin Mining Pool Server
Authentication Token: abc123def456...
Dashboard URL: http://localhost:8080?token=abc123def456...
gRPC server listening on port 50051

2. Start a miner (in a new terminal):

make run-client

You should see mining activity:

Connected to mining pool at localhost:50051
Registered as miner: miner-hostname-1234567890
Mining block #1... Hash rate: 2.5 MH/s
Block found! Nonce: 98765, Hash: 000000ab1cd...

3. View the dashboard:

Open the URL from step 1 in your browser, or navigate to:

http://localhost:8080?token=YOUR_AUTH_TOKEN_HERE

You'll see real-time statistics including active miners, hash rates, and mined blocks.

Note: The server listens on all network interfaces - replace localhost with your server's IP for remote access.

How It Works

The mining pool operates using a proof-of-work consensus mechanism:

1. Server initializes blockchain with genesis block
2. Miners connect via gRPC and register with IP/hostname
3. Server distributes work assignments (block templates)
4. Miners compute SHA-256 hashes to find valid nonces
5. Miners submit solutions when difficulty target is met
6. Server validates and adds blocks to the blockchain
7. Dashboard displays real-time statistics and miner activity

Each block requires finding a hash with a specific number of leading zeros (configurable difficulty). Miners receive 50 RTC per block mined.

Data Flow

Client Miner                    Server
    |                              |
    |--RegisterMiner(IP,Hostname)->|
    |<--RegistrationResponse-------|
    |--GetWork()------------------>|
    |<--WorkResponse(Block)--------|
    | [Mining: compute hashes]     |
    |--SubmitWork(nonce,hash)----->|
    |                              | [Validate proof-of-work
    |                              |  and add block to chain]
    |<--SubmissionResponse---------|
    |--Heartbeat(stats)----------->|
    |<--HeartbeatResponse----------|

Usage

Running the Server

HTTP (Default):

./bin/server

• gRPC server: port 50051
• Web dashboard: http://localhost:8080

HTTPS/TLS (Recommended):

# Generate certificates (one time)
./generate_certs.sh

# Start with TLS
RTC_SERVER_TLS_ENABLED=true ./bin/server