Skip to content

Operator Panel

The sessions panel shows all active and inactive beacons with:

  • Live online/offline status and last seen time
  • External IP, OS, username, hostname
  • Geolocation and country flag
  • Custom tags and persistent notes
  • Detection tracking (mark a session as detected with EDR/AV name)

The in-panel terminal lets you send commands and see output. Features:

  • Full command/output history with scroll
  • History navigation with arrow keys
  • CWD tracking displayed in the prompt (Windows and Linux)
  • Export history as .txt or .json (internal protocol commands filtered automatically)

Click PTY Shell on any Python beacon (Linux target) to open a full interactive terminal in the browser powered by xterm.js. Full PTY with Ctrl+C, tab completion, and interactive programs like vim or htop.

Navigate the target filesystem visually. Back/forward history navigation. Click any file to download it directly to your browser. 500 MB file download limit.

Stage a file on the server, then send __upload__ <remote_path> — the beacon pulls and writes the file on the next check-in.

World map (Leaflet + CartoDB) showing agent locations resolved automatically from external IP at check-in.

vis.js graph of discovered internal network. Run neighbors on any beacon to discover nearby hosts and edges. Builds a visual pivot map across multiple sessions.

Real-time in-panel chat shared across all connected operators. Notifications badge on new messages. Chat history is persisted in the database.

Generates ready-to-paste Apache, nginx, or Caddy configs for C2 traffic redirection through a clean VPS. See the Redirectors tutorial for details.

One-click compilation of all beacon types. Configurable evasion, persistence, sleep, and encryption options. See the Beacons page for the full options list.