This is a Mythic C2 Profile called mqtt. It provides a way for agents to connect to a intermediary mqtt server in which the C2 Profile also communicates. This profile includes:
Kill Dates
Sleep Intervals
Support for SSL
The c2 profile has mythic_container==0.5.12 PyPi
package installed and reports to Mythic as version "3.3".
This repo containes a mqtt listener that will connect to an external mqtt server.
This allows multiple agents to conenct to the same mqtt server, the Mythic mqtt C2 profile will poll the mqtt server to send commands and receive responses.
- The agent sends a checkin to the pre defined basetopic/checkin topic.
- The C2 Profile is subscribed to the checkin and output subtopics so it sees the checkin and forwards to Mythic.
- Mythic responds with tasking and the C2 Profile sends a message to the checkin subtopic with the task received from Mythic
- As the agent is subscribed to the checkin subtopic, it sees the message and performs the task.
- After completion of the task the agent sends a message to the output subtopic with the results of said task.
- The C2 Profile takes the task output from the output topic, and displays it in the Mythic UI.
Use mythic-cli to install it:
sudo ./mythic-cli install github https://github.com/MythicC2Profiles/mqtt.git
See https://docs.mythic-c2.net/installation#installing-agents-c2-profiles for more information