v2.4.0

Added

• Mythic client handles multiple HTTP headers with the Mythic http C2 Profile
• Automatic Windows HTTP proxy authentication through the winhttp API
• Added the -http-client command line argument and HTTPCLIENT Makefile variable to specify which HTTP client to use
  • Use go for the default Go HTTP client
  • Use winhttp API for HTTP C2
• Use go build tags to control which C2 clients are compiled into the agent. Build Tags
  • When ANY build tag is included, the agent will ONLY include that feature and nothing else. For example, if ONLY the http tag is provided, the SMB, TCP, and UDP clients will not be included.
  • If one of the following build tags is used, then only the C2 profiles provided will be compiled in
  • http - Include all HTTP clients (including HTTP/1.1, HTTP/2, and HTTP/3)
  • http1 - Include HTTP/1.1 client
  • http2 - Include HTTP/2 client
  • http3 - Include HTTP/3 client
  • winhttp - Include Windows winhttp API client
  • mythic - Include the Mythic client for the Mythic http C2 profile
  • smb - Include SMB client
  • tcp - Include TCP client
  • udp - Include UDP client

Fixed

• Resolved several SOCKS5 issues
  • Updated Mythic client to handle post_response actions with ServerPostResponse structure to include SOCKS information
  • Created a go routine and a channel just for sending SOCKS data in place of using the Jobs channel
• Issue 38 - Added evasion_386.go to facilitate x86 Windows builds

Changed

• Upgraded the following libraries to their latest version
  • upgraded golang.org/x/net v0.21.0 => v0.22.0
  • upgraded github.com/google/uuid v1.5.0 => v1.6.0
  • upgraded github.com/quic-go/quic-go v0.40.1 => v0.42.0
  • upgraded github.com/refraction-networking/utls v1.6.0 => v1.6.3

Security

• Upgraded go-jose/v3 to v3.0.3 to address CVE-2024-28180

Merlin documentation and Wiki can be found here

The compressed files have a password of merlin