Sparse: A Rust C2 framework

Developed using libpcap to enable evading local firewalls and with an eye towards hiding itself from inspection. Deprecated in favor of sparse-v2 before being completely developed; the most significant tool this repository contributes is sparse-05.

This repository weaponizes some of the concepts highlighted in this blog post

Significant Packages

• pcap-sys: A Rust wrapper around the libpcap library for Linux
• nl-sys: A Rust wrapper around the netlink (nl) library on Linux
• sparse-05: A bind shell utility to create bind shells on target servers and connect to them

Development

This environment is designed to be developed in with a Nix developer shell, obtained with nix develop

Bind shell

The most mature implementation of Sparse would be the Sparse version 0.5 bind shell, which has documentation in its appropriate folder