Stageless PHP/Python/Java/Windows/Mettle with Malleable C2 profile support - #21483

Merged

smcintyre-r7 merged 27 commits into

OJ:feature/mc2-all

Jul 7, 2026

Commits on Jul 1, 2026

Support MC2 in python

OJ
authored and
smcintyre-r7
committed
9ba0e11
Refactor config gen

OJ
authored and
smcintyre-r7
committed
f7aafe6
Add support for HTTP/S PHP and TLV config

OJ
authored and
smcintyre-r7
committed
5ec1fc2
Remove emails from source

OJ
authored and
smcintyre-r7
committed
4a5fe56
Config block support for mettle

OJ
authored and
smcintyre-r7
committed
bf781a9
Restore android stageless via TLV

OJ
authored and
smcintyre-r7
committed
1f0bf60
Fix custom_headers emission, add C2 UUID for placement

OJ
authored and
smcintyre-r7
committed
1472c4d
Support mc2 in transport_* commands

OJ
authored and
smcintyre-r7
committed
aa220bb
Add stagless payloads for Java

OJ
authored and
smcintyre-r7
committed
428f34f
Add debug output for incoming MC2 payloads

OJ
authored and
smcintyre-r7
committed
f0dc4a7
Fix MC2 payload gen

OJ
authored and
smcintyre-r7
committed
492c030
Fix mettle config generation

OJ
authored and
smcintyre-r7
committed
a01c8d4
Wire MC2 into PHP payloads

OJ
authored and
smcintyre-r7
committed
2b7e6d4
Remove debug log and fix uuid loading in C2

OJ
authored and
smcintyre-r7
committed
b60e645
Add IN/OUTBOUND encoding to correctly handle encoding

OJ
authored and
smcintyre-r7
committed
b130aa9
Wire MC2 into mettle

OJ
authored and
smcintyre-r7
committed
6c88462
Correctly handle UUID encoding/decoding

OJ
authored and
smcintyre-r7
committed
44b3b63
Move to STRING instead of RAW for UUID prefix/suffix

OJ
authored and
smcintyre-r7
committed
3da3c71
Support stageless java payloads

OJ
authored and
smcintyre-r7
committed
068e9c4
Add support for stageless extension wiring

OJ
authored and
smcintyre-r7
committed
509c38e
Add stageless extension support to mettle

OJ
authored and
smcintyre-r7
committed
7627ef1
Fallback to global UA if not present in profile

OJ
authored and
smcintyre-r7
committed
45f33dc
Fix connd_id to session map and C2 comment handling

OJ
authored and
smcintyre-r7
committed
8c1a36c
Tolerate unsupported C2 blocks and split multi-URI directives

OJ
authored and
smcintyre-r7
committed
932962b
Add fetch-payload fix as per Diego's comments

OJ
authored and
smcintyre-r7
committed
69a5e60

Commits on Jul 2, 2026

Fix stageless Windows Meterpreter config slot
smcintyre-r7
committed
7be0277

Commits on Jul 5, 2026

Pull in Spencer's config block fix
OJ
committed
dc597ca