if the bind shell example is compiled with the right feature and is run inside a(n) (im)properly configured Docker container, it is now able to break out and run some commands on the host for some reason, under this breakout mode, it runs a little weird with networking commands, but does fine with file system or IPC based commands
Sparse: A Rust C2 framework
Developed using libpcap to enable evading local firewalls and with an eye towards hiding itself from inspection
Packages
- pcap-sys: A Rust wrapper around the libpcap library for Linux
- nl-sys: A Rust wrapper around the netlink (nl) library on Linux
- sparse-protocol: The definition of various protocols, wrappers, and compositions to allow for a flexible working environment
Development
To develop or compile this project, open it in GitHub Codespaces or using Visual Studio Code's Dev Container extension (requires Docker to be installed). Doing so will create an environment which has all the dependencies necessary in order to build and run the code in a more secure environment.
Proofs of concept
There are multiple proofs of concept that are made to further develop libraries and further this project as well as provide stepping stones to help educate new contributors, and they are located in the examples folder
Languages
Rust
96.8%
Nix
2.5%
Python
0.4%
C
0.3%