# BlackMamba | C2/post-exploitation Framework

**URL:** <https://onehack.st/t/blackmamba-c2-post-exploitation-framework/173683>\
**Category:** Tools & Scripts\
**Tags:** hacking, operating-system\
**Created:** [February 25, 2021, 1:59pm UTC](https://onehack.st/t/blackmamba-c2-post-exploitation-framework/173683 "2021-02-25T13:59:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [February 25, 2021, 1:59pm UTC](https://onehack.st/t/blackmamba-c2-post-exploitation-framework/173683/1 "2021-02-25T13:59:02Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/0/c/0ce2ad740e5537d9df0b8f53e58d52fbe8f060f7.png)

BlackMamba is a multi client C2/post exploitation framework with some spyware features. Powered by Python 3.8.6 and QT Framework.

Some of BlackMamba features are:

- **Multi Client** – Supports multiple client connections at the same time.
- **Real Time Communication Updates** – Real time communication and updates between the client and server.
- **Encrypted Communication** – Almost all communications are encrypt, with exception of screen video streaming.
- **Screenshot Gattering** – Get a realtime screenshot from the client.
- **Video Streaming** – Watch in real time the client screen.
- **Client Lock** – Lock and unlock the machine of the client.
- **Encrypted File Transfer (upload/download)** – Download files from the client or uploads files for the client.
- **Keylogger** – Register all the keys pressed by client.
- **Web Downloader** – Download files from URLs or content by RAW pages.

 ![image](https://onehack.st/uploads/default/original/3X/d/5/d5a96419334e12b41fb9d85b274a77f460d5c1f9.jpeg)

 ![image](https://onehack.st/uploads/default/original/3X/1/2/12d10cedd4a3d1bb7f5fdad0ca1c66b759c07061.png)

 ![image](https://onehack.st/uploads/default/original/3X/d/4/d4f3e00cfb73b3dac7ae7e372a5aa49ad11f7a82.jpeg)

 ![image](https://onehack.st/uploads/default/original/3X/0/1/01d68ce4c63ad4541f61310c6230bff155c26e00.png)

 ![image](https://onehack.st/uploads/default/original/3X/5/a/5a3b48cd30fec4741ce819ab3a0e8374865a63e3.png)

 ![image](https://onehack.st/uploads/default/original/3X/a/8/a8f73cde51faf4bbb118322b04429e1bae63d99c.png)

**Install Guide**

> SERVER INSTALL

1º – Download the BlackMamba;

2º – Install the PIP packages;

```auto
 PyQt5 Pillow PyAutoGUI pytest-shutil cryptography pynput pygame

```

3º – Open the port 65000 and 65005 in your Gateway or Router (the port number is optional);

4º – Create an exception in firewall for BlackMamba or disable it;

5ª – Go to “BlackMamba/bin/profile/socket.txt” and input the port number opened;

```auto
 SERVER_IP=0.0.0.0 PORT=65000 PORT_VIDEO=65005 IMPORTANT: Do not change the 0.0.0.0.

```

6º (OPTIONAL) – Go to BlackMamba folder and open the “keygen.py” file. Copy the result key and paste in the “BlackMamba/bin/profile/crypt\_key.py” ;

```auto
The BlackMamba use a default cryptography key, is interesting that you change it.

```

7º – Back to BlackMamba root folder and open the “main.py” file;

```auto
WINDOWSpython main.pyGNU/LINUXsudo chmod 777 main.pysudo python3.8 main.py KALI LINUX (sudo chmod 777 main.py) (sudo python3 main.py)

```

8º – Click on the button that have a person icon and plus signal;

9º – Input the path where the Python file will be created, input the both port numbers and the IP address (external or local) of your host, then click on the “Create” button.

> CLIENT INSTALL

After create the Client script you’ll need to open the script in the host target:

**WINDOWS**

python script.py

**GNU/LINUX**

1º Download the packages:

```auto
scrot -ypython3-pip -ypython3-tk -ypython3-dev -y

```

2º sudo python3.8 script.py

```auto
KALI LINUX(sudo python3 script.py)

```

**IMPORTANT** : The script of client not have persistence, if you want to do a persistence you’ll need to made by yourself. Another important point is that the client script maybe delay some seconds or few minutes for connect/reconnect.

**Release status**

Currently the BlackMamba is on beta stage, this means that the features are all completed but likely to contain a number of known and unknown bugs. Is important reinforce that the majority of critical bugs like crashes or buffer overflow alredy have been solved.

**More information**

For more information please take a look in the Wiki.

**Call for Contributions**

I’m just one person developing the BlackMamba, if anyone finds this tool useful and would like to add some functionality, improve the code performace or improve something in the BlackMamba the best way to get it added is to submit a pull request.

If you want to collaborate but you don’t know Python you can help me so much with bug reports, you can do it with Issues

**Author**

Gustavo ([Loseys](https://github.com/loseys))

**Acknowledgments, Contributors & Involuntary Contributors**

**(In no particular order)**

- [Random Davis](https://stackoverflow.com/users/6273251/random-davis) for help me with video streaming script.
- [Wanderson-Magalhaes](https://github.com/Wanderson-Magalhaes) for GUI inspiration. Tamo junto Wanderson.
- [@byt3bl33d3r](https://github.com/byt3bl33d3r) for README inspiration.
- **Vitor** for help me with some English translations.

## GitHub:

> **[GitHub - loseys/BlackMamba: C2/post-exploitation framework](https://github.com/loseys/BlackMamba)**
>
> C2/post-exploitation framework