SOURCE CODE Arachne C2

ArachneC2 is a decentralized Command & Control framework built on libp2p (the peer-to-peer networking stack behind IPFS). No servers, no domains, no IPs to block — just cryptographic identities communicating over the global p2p network. Inspired by Sliver, but redesigned for decentralized infrastructure.



Key Idea:
Instead of running a C2 server on a VPS that can be taken down, Arachne uses GossipSub (PubSub) and DHT peer discovery over the IPFS peer-to-peer network. Your implant fleet and operator are all equal peers in the network — no central point of failure.

Features:

• Self-contained single binary — no source tree needed to generate implants
  
• Beacon-mode implants that maintain presence via PubSub topics
  
• DHT-based peer discovery — no hardcoded server IPs
  
• Encrypted and signed messages (Ed25519 + NaCl box)
  
• Interactive operator console (list, select, exec, ls, ps, cd, pwd, download, upload)
  
• Interactive shell over direct libp2p stream (PTY on Linux/macOS, hidden ConPTY on Windows)
  
• Port forwarding through implant via direct libp2p stream
  
• Cross-platform implants (Linux, macOS, Windows)
  
• Protocol Buffers message format with per-message signature verification
  
• Opaque protocol identifiers (short proto package names, Z-series message types, short wire IDs)
  
• Per-implant command topics — commands reach only the intended implant
  
• Built-in hole punching and NAT traversal
  
• Automatic Go installation if missing (generates implants anywhere)
  
• Garble-based obfuscation (
  
  Code:

  --obfuscate
  — strips names, literals, paths)
  
• Cover traffic to mask beacon timing signatures
  
• Persistent implant identity (embedded keypair per build)
  
• Quiet mode (
  
  Code:

  --quiet
  — daemonize on Linux/macOS, hide console on Windows)
  
• Automatic implant disconnect detection and alerting
  
• Stream keepalive prevents relay circuit idle timeout
  
• WebSocket + TCP transport (UDP/multicast-free for sandbox compatibility)
  
• VM detection (
  
  Code:

  --antivm
  — 65+ detection techniques with VMAware-compatible scoring, no CGO required)
  
  Download Here:
  Hidden Content

  You must register or login to view this content.
  
  

this is interesting, i'll check it

Thanks for sharing

this is interesting, i'll check it

thanks for upload

Thanks for sharing

(07-16-2026, 04:07 AM)aqua Wrote: ArachneC2 is a decentralized Command & Control framework built on libp2p (the peer-to-peer networking stack behind IPFS). No servers, no domains, no IPs to block — just cryptographic identities communicating over the global p2p network. Inspired by Sliver, but redesigned for decentralized infrastructure.



Key Idea:
Instead of running a C2 server on a VPS that can be taken down, Arachne uses GossipSub (PubSub) and DHT peer discovery over the IPFS peer-to-peer network. Your implant fleet and operator are all equal peers in the network — no central point of failure.

Features:

• Self-contained single binary — no source tree needed to generate implants
  
• Beacon-mode implants that maintain presence via PubSub topics
  
• DHT-based peer discovery — no hardcoded server IPs
  
• Encrypted and signed messages (Ed25519 + NaCl box)
  
• Interactive operator console (list, select, exec, ls, ps, cd, pwd, download, upload)
  
• Interactive shell over direct libp2p stream (PTY on Linux/macOS, hidden ConPTY on Windows)
  
• Port forwarding through implant via direct libp2p stream
  
• Cross-platform implants (Linux, macOS, Windows)
  
• Protocol Buffers message format with per-message signature verification
  
• Opaque protocol identifiers (short proto package names, Z-series message types, short wire IDs)
  
• Per-implant command topics — commands reach only the intended implant
  
• Built-in hole punching and NAT traversal
  
• Automatic Go installation if missing (generates implants anywhere)
  
• Garble-based obfuscation (
  
  Code:

  --obfuscate
  — strips names, literals, paths)
  
• Cover traffic to mask beacon timing signatures
  
• Persistent implant identity (embedded keypair per build)
  
• Quiet mode (
  
  Code:

  --quiet
  — daemonize on Linux/macOS, hide console on Windows)
  
• Automatic implant disconnect detection and alerting
  
• Stream keepalive prevents relay circuit idle timeout
  
• WebSocket + TCP transport (UDP/multicast-free for sandbox compatibility)
  
• VM detection (
  
  Code:

  --antivm
  — 65+ detection techniques with VMAware-compatible scoring, no CGO required)
  
  Download Here:
  

(07-16-2026, 04:07 AM)aqua Wrote: ArachneC2 is a decentralized Command & Control framework built on libp2p (the peer-to-peer networking stack behind IPFS). No servers, no domains, no IPs to block — just cryptographic identities communicating over the global p2p network. Inspired by Sliver, but redesigned for decentralized infrastructure.



Key Idea:
Instead of running a C2 server on a VPS that can be taken down, Arachne uses GossipSub (PubSub) and DHT peer discovery over the IPFS peer-to-peer network. Your implant fleet and operator are all equal peers in the network — no central point of failure.

Features:

• Self-contained single binary — no source tree needed to generate implants
  
• Beacon-mode implants that maintain presence via PubSub topics
  
• DHT-based peer discovery — no hardcoded server IPs
  
• Encrypted and signed messages (Ed25519 + NaCl box)
  
• Interactive operator console (list, select, exec, ls, ps, cd, pwd, download, upload)
  
• Interactive shell over direct libp2p stream (PTY on Linux/macOS, hidden ConPTY on Windows)
  
• Port forwarding through implant via direct libp2p stream
  
• Cross-platform implants (Linux, macOS, Windows)
  
• Protocol Buffers message format with per-message signature verification
  
• Opaque protocol identifiers (short proto package names, Z-series message types, short wire IDs)
  
• Per-implant command topics — commands reach only the intended implant
  
• Built-in hole punching and NAT traversal
  
• Automatic Go installation if missing (generates implants anywhere)
  
• Garble-based obfuscation (
  
  Code:

  --obfuscate
  — strips names, literals, paths)
  
• Cover traffic to mask beacon timing signatures
  
• Persistent implant identity (embedded keypair per build)
  
• Quiet mode (
  
  Code:

  --quiet
  — daemonize on Linux/macOS, hide console on Windows)
  
• Automatic implant disconnect detection and alerting
  
• Stream keepalive prevents relay circuit idle timeout
  
• WebSocket + TCP transport (UDP/multicast-free for sandbox compatibility)
  
• VM detection (
  
  Code:

  --antivm
  — 65+ detection techniques with VMAware-compatible scoring, no CGO required)
  
  Download Here:
  

thanks for this source. top

(07-16-2026, 04:07 AM)aqua Wrote: ArachneC2 is a decentralized Command & Control framework built on libp2p (the peer-to-peer networking stack behind IPFS). No servers, no domains, no IPs to block — just cryptographic identities communicating over the global p2p network. Inspired by Sliver, but redesigned for decentralized infrastructure.



Key Idea:
Instead of running a C2 server on a VPS that can be taken down, Arachne uses GossipSub (PubSub) and DHT peer discovery over the IPFS peer-to-peer network. Your implant fleet and operator are all equal peers in the network — no central point of failure.

Features:

• Self-contained single binary — no source tree needed to generate implants
  
• Beacon-mode implants that maintain presence via PubSub topics
  
• DHT-based peer discovery — no hardcoded server IPs
  
• Encrypted and signed messages (Ed25519 + NaCl box)
  
• Interactive operator console (list, select, exec, ls, ps, cd, pwd, download, upload)
  
• Interactive shell over direct libp2p stream (PTY on Linux/macOS, hidden ConPTY on Windows)
  
• Port forwarding through implant via direct libp2p stream
  
• Cross-platform implants (Linux, macOS, Windows)
  
• Protocol Buffers message format with per-message signature verification
  
• Opaque protocol identifiers (short proto package names, Z-series message types, short wire IDs)
  
• Per-implant command topics — commands reach only the intended implant
  
• Built-in hole punching and NAT traversal
  
• Automatic Go installation if missing (generates implants anywhere)
  
• Garble-based obfuscation (
  
  Code:

  --obfuscate
  — strips names, literals, paths)
  
• Cover traffic to mask beacon timing signatures
  
• Persistent implant identity (embedded keypair per build)
  
• Quiet mode (
  
  Code:

  --quiet
  — daemonize on Linux/macOS, hide console on Windows)
  
• Automatic implant disconnect detection and alerting
  
• Stream keepalive prevents relay circuit idle timeout
  
• WebSocket + TCP transport (UDP/multicast-free for sandbox compatibility)
  
• VM detection (
  
  Code:

  --antivm
  — 65+ detection techniques with VMAware-compatible scoring, no CGO required)
  
  Download Here:
  

arachneeeee?