SOURCE CODE Arachne C2

ArachneC2 is a decentralized Command & Control framework built on libp2p (the peer-to-peer networking stack behind IPFS). No servers, no domains, no IPs to block — just cryptographic identities communicating over the global p2p network. Inspired by Sliver, but redesigned for decentralized infrastructure.



Key Idea:
Instead of running a C2 server on a VPS that can be taken down, Arachne uses GossipSub (PubSub) and DHT peer discovery over the IPFS peer-to-peer network. Your implant fleet and operator are all equal peers in the network — no central point of failure.

Features:

• Self-contained single binary — no source tree needed to generate implants
  
• Beacon-mode implants that maintain presence via PubSub topics
  
• DHT-based peer discovery — no hardcoded server IPs
  
• Encrypted and signed messages (Ed25519 + NaCl box)
  
• Interactive operator console (list, select, exec, ls, ps, cd, pwd, download, upload)
  
• Interactive shell over direct libp2p stream (PTY on Linux/macOS, hidden ConPTY on Windows)
  
• Port forwarding through implant via direct libp2p stream
  
• Cross-platform implants (Linux, macOS, Windows)
  
• Protocol Buffers message format with per-message signature verification
  
• Opaque protocol identifiers (short proto package names, Z-series message types, short wire IDs)
  
• Per-implant command topics — commands reach only the intended implant
  
• Built-in hole punching and NAT traversal
  
• Automatic Go installation if missing (generates implants anywhere)
  
• Garble-based obfuscation (
  
  Code:

  --obfuscate
  — strips names, literals, paths)
  
• Cover traffic to mask beacon timing signatures
  
• Persistent implant identity (embedded keypair per build)
  
• Quiet mode (
  
  Code:

  --quiet
  — daemonize on Linux/macOS, hide console on Windows)
  
• Automatic implant disconnect detection and alerting
  
• Stream keepalive prevents relay circuit idle timeout
  
• WebSocket + TCP transport (UDP/multicast-free for sandbox compatibility)
  
• VM detection (
  
  Code:

  --antivm
  — 65+ detection techniques with VMAware-compatible scoring, no CGO required)
  
  Download Here: Hidden Content